Package: lives Version: 2.4.0~ds0-1+b1 Severity: important Dear Maintainer,
simply starting `lives` will create a new directory `~/livestmp` (in my home), which is world read and writeable. i think this is an absolte no-go. $ cd ~ $ rm -rf .lives* livestmp $ lives [...] $ ls -lhan livestmp/ total 8.0K drwxrwxrwx 2 1000 1000 4.0K Sep 4 20:35 . drwxr-xr-x 100 1000 1000 4.0K Sep 4 20:35 .. $ i would expect any newly created directories to obey (at least) my umask settings. furthermore: i really hate it, if applications clutter my home-directory with automatically created directories. now lives has already a wizard that asks me which directory i want to use as a scratch-dir, but it does so after ~/livestmp has been created... mfdasr IOhannes -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.1.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages lives depends on: ii frei0r-plugins 1.4-3+b1 ii imagemagick 8:6.8.9.9-5.1+b1 ii libasound2 1.0.29-1 ii libatk1.0-0 2.16.0-2 ii libavc1394-0 0.5.4-2 ii libavutil-ffmpeg54 7:2.7.2-2+b1 ii libc6 2.19-19 ii libcairo-gobject2 1.14.2-2 ii libcairo2 1.14.2-2 ii libgdk-pixbuf2.0-0 2.31.5-1 ii libglib2.0-0 2.44.1-1.1 ii libgtk-3-0 3.16.6-1 ii libjack-jackd2-0 [libjack-0.116] 1.9.10+20150825git1ed50c92~dfsg-1 ii libmjpegutils-2.1-0 1:2.1.0+debian-3 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 ii libpng12-0 1.2.50-2+b2 ii libpulse0 6.0-5 ii libraw1394-11 2.1.1-1 ii libswscale-ffmpeg3 7:2.7.2-2+b1 ii libunicap2 0.9.12-2 ii libweed0 2.4.0~ds0-1+b1 ii libx11-6 2:1.6.3-1 ii lives-data 2.4.0~ds0-1 ii lives-plugins 2.4.0~ds0-1+b1 ii mplayer2 [mplayer] 2.0-728-g2c378c7-4+b2 ii ogmtools 1:1.5-3+b2 ii perl 5.20.2-6 ii procps 2:3.3.10-2 ii python 2.7.9-1 ii sox 14.4.1-5 Versions of packages lives recommends: ii dvgrab 3.5-2+b3 ii icedax 9:1.1.11-3 ii libogg0 1.3.2-1 ii libtheora-bin 1.1.1+dfsg.1-6 ii libtheora0 1.1.1+dfsg.1-6 ii mencoder 2:1.1.1+svn37434-1 ii mkvtoolnix 8.3.0-1 ii pulseaudio 6.0-5 ii x11-utils 7.7+3 ii youtube-dl 2015.06.04.1-1 Versions of packages lives suggests: ii libdv-bin 1.0.0-6 ii mjpegtools 1:2.1.0+debian-3 -- no debconf information