[Bug 200794] New: zope: world writable files

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200794

           Summary: zope: world writable files
           Product: Fedora Extras
           Version: fc5
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: high
          Priority: urgent
         Component: zope
        AssignedTo: gauret(a)free.fr
        ReportedBy: ville.skytta(a)iki.fi
         QAContact: extras-qa(a)fedoraproject.org
                CC: extras-qa(a)fedoraproject.org,fedora-security-
                    list(a)redhat.com


The following files in zope are world writable apparently due to bad umask
setting in the FE build system; its maintainers have been notified.

/usr/lib/zope/skel/etc/logrotate.conf.in
/usr/share/doc/zope-2.8.3/README.Fedora
/var/lib/zope/etc/logrotate.conf

FE[345] and devel are affected and this should be fixed in the package anyway, a
fix is to use "install -pm 644" instead of cp when copying files around.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200794] zope: world writable files

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: zope: world writable files


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200794





------- Additional Comments From seg(a)haxxed.com  2006-08-01 18:33 EST -------
The packaging guidelines should probably be updated to recommend not using cp,
rather than the approval it currently gives:

http://fedoraproject.org/wiki/Packaging/Guidelines#head-0239576e441f9ef53...

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200794] zope: world writable files

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: zope: world writable files


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200794


cweyl(a)alumni.drew.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |cweyl(a)alumni.drew.edu




------- Additional Comments From cweyl(a)alumni.drew.edu  2006-08-01 18:48 EST -------
A liberal use of %{_fixperms} also helps catch things.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200794] zope: world writable files

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: zope: world writable files


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200794


ville.skytta(a)iki.fi changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
         AssignedTo|gauret(a)free.fr              |ville.skytta(a)iki.fi
                 CC|                            |gauret(a)free.fr




------- Additional Comments From ville.skytta(a)iki.fi  2006-08-02 15:30 EST -------
Fixed and built for all dists, will be in the next push.

http://buildsys.fedoraproject.org/build-status/job.psp?uid=13617
http://buildsys.fedoraproject.org/build-status/job.psp?uid=13618
http://buildsys.fedoraproject.org/build-status/job.psp?uid=13619
http://buildsys.fedoraproject.org/build-status/job.psp?uid=13620

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200794] zope: world writable files

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: zope: world writable files


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200794


gauret(a)free.fr changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |CLOSED
         Resolution|                            |CURRENTRELEASE
   Fixed In Version|                            |2.3.9-4




------- Additional Comments From gauret(a)free.fr  2006-08-04 14:41 EST -------
Thanks for dealing with this while I was on vacation. I confirm that the updated
version has correct permissions.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.