Package: incron Version: 0.5.10-1 Severity: minor File: /usr/bin/incrontab Dear Maintainer, while playing with incron I found, that ownership of user's incrontab created by root is root:incron. User can't change itself incrontab.
bobek:~# ls -la /var/spool/incron/ total 8 drwx-wx--t 2 root incron 4096 May 22 13:37 . drwxr-xr-x 13 root root 4096 May 20 22:58 .. bobek:~# echo '/tmp IN_ALL_EVENTS true $@/$# $%' | incrontab -u zito - copying table from file '-' bobek:~# ls -la /var/spool/incron/ total 12 drwx-wx--t 2 root incron 4096 May 22 13:37 . drwxr-xr-x 13 root root 4096 May 20 22:58 .. -rw-r--r-- 1 root incron 33 May 22 13:37 zito bobek:~# zito@bobek:~$ incrontab -r removing table for user 'zito' cannot remove table for user 'zito': Operation not permitted Also mode of incrontab is different, when the incrontab is edited by root. zito@bobek:~$ echo '/tmp IN_ALL_EVENTS true $@/$# $%' | incrontab - copying table from file '-' bobek:~# ls -l /var/spool/incron/ total 4 -rw-r--r-- 1 zito incron 33 May 22 14:26 zito bobek:~# incrontab -e -u zito # adding empty lines or so... table updated bobek:~# ls -l /var/spool/incron/ total 4 -rw------- 1 zito incron 33 May 22 14:28 zito But maybe this doesn't hurt, as incrond is running with user root. Thanks for your time Cheers -- Zito -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.8-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages incron depends on: ii adduser 3.113+nmu3 ii libc6 2.17-3 ii libgcc1 1:4.8.0-7 ii libstdc++6 4.8.0-7 ii lsb-base 4.1+Debian11 incron recommends no packages. incron suggests no packages. -- Configuration Files: /etc/incron.allow [Errno 13] Permission denied: u'/etc/incron.allow' /etc/incron.deny [Errno 13] Permission denied: u'/etc/incron.deny' -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
