On 6 February 2021 at 10:04, Sébastien Villemot wrote: | Package: r-base-core | Version: 3.5.2-1
That is two+ years behind (3.5.0 released April 2018, 3.6.0 in April 2019, 4.0.0 last year -- and 4.1.0 soon). | Severity: normal | | Hi Dirk, | | The /usr/local/lib/R directory (and its site-library subdir), as created by the | postinst script of r-base-core, is always owned by group staff, with | permissions 2775. | | This is a violation of Debian Policy §9.1.2. Those specific ownership and | permissions should only be set when the file /etc/staff-group-for-usr-local I can add a check. | is present. When it is not, the directory should be owned by root:root and have | permissions 0755. A disservice to our users as it makes it harder to have shared R package installations. Dirk | Note that, since buster, new installations do not have | /etc/staff-group-for-usr-local by default, which makes this bug biting more | often. | | Best, | | -- | ⢀⣴⠾⠻⢶⣦⠀ Sébastien Villemot | ⣾⠁⢠⠒⠀⣿⡁ Debian Developer | ⢿⡄⠘⠷⠚⠋⠀ https://sebastien.villemot.name | ⠈⠳⣄⠀⠀⠀⠀ https://www.debian.org -- https://dirk.eddelbuettel.com | @eddelbuettel | e...@debian.org