Bug#352394: tex-common: permission scheme for /var/cache/fonts
Package: tex-common
Version: 0.15
Severity: normal
The debconf setting tex-common/managedlsr allows one to make the file
/var/cache/fonts/ls-R group-writable. The purpose of that is correctly explained
as allowing this file to be updated immediately by non-root users after a new
font is generated, instead for waiting for the daily cron job. However, in this
case it also makes sense to restrict the generation itself to users in the same
group, i.e. to make the subdirectories of /var/cache/fonts mode 2775, group tex
(or rather whatever group is specified by tex-common/groupname).
It used to be that tetex-bin created these subdirectories in postinst, and
thus a local admin could just change the permissions by hand and upgrades wouldn't
touch them. Now tex-common ships them in the deb with hardcoded permissions
1777, which is wrong for this situation.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-10custom1
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages tex-common depends on:
ii debconf [debconf-2.0] 1.4.70 Debian configuration management sy
ii ucf 2.005 Update Configuration File: preserv
tex-common recommends no packages.
-- debconf information:
* tex-common/groupname: tex
tex-common/cnf_name:
* tex-common/managedlsr: cache
Reply to: