Re: Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable

2020-08-04 Thread Ansgar
On Tue, 2020-08-04 at 23:50 +0200, Guillem Jover wrote: > On Tue, 2020-08-04 at 13:56:45 -0700, Russ Allbery wrote: > > Ansgar writes: > > > 10.9 Permissions and owners currently says > > > > Files should be owned by root:root, and made writable only by the > > > > owner and universally readable (

Re: Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable

2020-08-04 Thread Russ Allbery
Guillem Jover writes: > On Tue, 2020-08-04 at 13:56:45 -0700, Russ Allbery wrote: >> I assume this is in support of systems, containers, or jails where UID >> 0 may not have CAP_FOWNER? > If that's the reason, it certainly was not clear from the original > report. :) It seems like the context i

Re: Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable

2020-08-04 Thread Guillem Jover
On Tue, 2020-08-04 at 13:56:45 -0700, Russ Allbery wrote: > Ansgar writes: > > 10.9 Permissions and owners currently says > > > | Files should be owned by root:root, and made writable only by the > > | owner and universally readable (and executable, if appropriate), > > | that is mode 644 or 755.

Re: Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable

2020-08-04 Thread Russ Allbery
Ansgar writes: > 10.9 Permissions and owners currently says > | Files should be owned by root:root, and made writable only by the > | owner and universally readable (and executable, if appropriate), > | that is mode 644 or 755." > However most files shouldn't be modified as modifications will j