Your message dated Thu, 13 Aug 2009 06:39:32 +0200
with message-id <[email protected]>
and subject line Re: acerhk: remove world write permissions
has caused the Debian Bug report #473805,
regarding acerhk: remove world write permissions
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
473805: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=473805
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: acerhk
Version: 0.5.35-2
Severity: normal
Tags: patch security
Please remove the initial world write permissions (see attachment). You
may enable group access adding this in /etc/modprobe.d/:
install acerhk modprobe --ignore-install acerhk $CMDLINE_OPTS && chgrp cdrom
/proc/driver/acerhk/*
Consider adding an acerhk group.
--- acerhk.c.orig 2008-03-31 22:53:50.000000000 +0200
+++ acerhk.c 2008-04-01 19:46:57.000000000 +0200
@@ -2700,7 +2700,7 @@
} else {
entry->owner = THIS_MODULE;
/* ... and led control file */
- entry = create_proc_entry("led", 0222, proc_acer_dir);
+ entry = create_proc_entry("led", 0220, proc_acer_dir);
if (entry == NULL) {
printk(KERN_INFO"acerhk: cannot create LED file\n");
remove_proc_entry("info", proc_acer_dir);
@@ -2712,7 +2712,7 @@
entry->write_proc = acerhk_proc_led;
entry->owner = THIS_MODULE;
/* ... and wireless led controll file */
- entry = create_proc_entry("wirelessled", 0222, proc_acer_dir);
+ entry = create_proc_entry("wirelessled", 0220, proc_acer_dir);
if (entry == NULL) {
printk(KERN_INFO"acerhk: cannot create wirelessled file\n");
remove_proc_entry("info", proc_acer_dir);
@@ -2725,7 +2725,7 @@
entry->write_proc = acerhk_proc_wirelessled;
entry->owner = THIS_MODULE;
/* ... and bluetooth led controll file */
- entry = create_proc_entry("blueled", 0222, proc_acer_dir);
+ entry = create_proc_entry("blueled", 0220, proc_acer_dir);
if (entry == NULL) {
printk(KERN_INFO"acerhk: cannot create blueled file\n");
remove_proc_entry("info", proc_acer_dir);
@@ -2740,7 +2740,7 @@
retval = 1;
#ifdef ACERDEBUG
/* add extra file for debugging purposes */
- entry = create_proc_entry("debug", 0222, proc_acer_dir);
+ entry = create_proc_entry("debug", 0220, proc_acer_dir);
if (entry == NULL) {
printk(KERN_INFO"acerhk: cannot create debug file\n");
remove_proc_entry("info", proc_acer_dir);
--- End Message ---
--- Begin Message ---
Untrusted users shouldn't be running programs in laptops in the first
place, isn't it?
--- End Message ---
