[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Woah, check this out:



Thought:
> Woah, check this out:  I just installed Debian a couple days ago, and
> 'thought' is my first user with UID 1000 and GID 1000.  Look at what I
> found when I was poking around:

These are all bugs, but all of them seem to have been fixed by the latest
version of the packages (from unstable.)

> /usr/doc/procmail/HISTORY.gz
> /usr/doc/procmail/README.gz
> /usr/doc/procmail/FAQ.gz
> /usr/doc/procmail/FEATURES.gz

All fixed on my system, which is using procmail 3.10-7.

> /usr/man/man8/pppstats.8.gz
> /usr/man/man8/chat.8.gz
> /usr/man/man8/pppd.8.gz
> /usr/man/man1/pon.1.gz

All fixed after ppp version 2.2.0f-20, I think.

> /var/catman/cat1/newgrp.1.gz

This is no suprise, when a user looks up a man page, the catman page ends up 
owned by their group.

> /proc/244
> /proc/285
> /home/thought
> /home/thought/.lynxrc
> /home/thought/.zhistory

These are all not a problem.

> The first file I noticed with gid 1000 was /etc/cron.daily/ppp

/etc/cron.daily/ppp also appears to be fixed by ppp 2.2.0f-20 and above.

If you find any more of these, you should report them as bug reports against
the offending packages.

-- 
#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj #  RSA-3-lines-perl
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 #         Joey Hess
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)   #  joey@kite.ml.org
      "How appropriate, you fight like a cow." - - Guybrush Threepwood


Reply to: