--- Begin Message ---
- To: Frank Küster <frank@kuesterei.ch>
- Cc: 388399@bugs.debian.org, alpha@buildd.debian.org, debian-alpha@lists.debian.org, mipsel@buildd.debian.org, debian-mips@lists.debian.org, mips@buildd.debian.org, Alex Owen <r.alex.owen@gmail.com>, Cyril Bouthors <cyb@debian.org>
- Subject: Bug#388399: FTBFS problems on alpha, mips[el]: Please help debugging
- From: Thiemo Seufer <ths@networkno.de>
- Date: Sat, 30 Sep 2006 18:12:40 +0100
- Message-id: <[🔎] 20060930171240.GC30302@networkno.de>
- Reply-to: Thiemo Seufer <ths@networkno.de>, 388399@bugs.debian.org
- In-reply-to: <[🔎] 861wptp9m0.fsf@alhambra.kuesterei.ch>
- References: <[🔎] 86ac4suq4w.fsf@alhambra.kuesterei.ch> <[🔎] 20060923102215.GC8904@thinkpad> <[🔎] 86bqp3f0w5.fsf_-_@alhambra.kuesterei.ch> <86r6xvgiib.fsf@alhambra.kuesterei.ch> <[🔎] 20060929103700.GD21205@mauritius.dodds.net> <[🔎] 86wt7mgb2l.fsf@alhambra.kuesterei.ch> <[🔎] 20060930055438.GG4726@mauritius.dodds.net> <[🔎] 86irj5r999.fsf@alhambra.kuesterei.ch> <[🔎] 20060930160554.GB30302@networkno.de> <[🔎] 861wptp9m0.fsf@alhambra.kuesterei.ch>
Frank Küster wrote:
> [Summary for the buildd people: We still need your input]
>
> Thiemo Seufer <ths@networkno.de> wrote:
>
> >> > sudo mkdir -p /tmp/texfonts/source/jknappen/ec
> >> > sudo mkdir -p /tmp/texfonts/tfm/jknappen/ec
> >> > make -C docs/psdoc
> >> >
> >> > So somewhere, there is a very, very wrong assumption that it's ok to use a
> >> > fixed, user-invariant path under /tmp for writing out fonts.
> >>
> >> I do not think that this is a bug, and anyway it's unrelated to the
> >> FTBFS problem. Previously fonts were created below /var, but this was
> >> regarded as a security risk because users would be able to completely
> >> fill up /var. Now the font cache is in the users' directories, and only
> >> as a fallback it is in /tmp/texfonts.
> >
> > So, if I understand that correctly, the bug was fixed by running mktexmf
> > as non-root, and the change of the cache location is only a collateral.
>
> No, or I do not understand what you mean.
I meant the the earlier security bug you mentioned. To me, the solution
for the earlier bug as well as the current one looks like keeping the
font cache in /var but maintaining it via a mktexmf user.
Thiemo
--- End Message ---