Package: alien
Severity: normal

Hello,
when alien converts package to deb it takes permissions from symlinks
(rwxrwxrwx) and passes it to chmod which changes the permissions of the
pointed-to file. That can lead to very hazardous situation.
For example if /usr/bin/somebinary points to /opt/package/bin/somebinary,
alien will generate this code:

# alien added permissions fixup code
[...]
chmod '777' '/usr/bin/somebinary'

and since chmod changes permissions of pointed-to file, original file
(/opt/package/bin/somebinary) gets rwxrwxrwx.

-- System Information:
Debian Release: 4.0
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-xen-amd64
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to