Public bug reported: Binary package hint: gtk2-engines-aurora
Shouldn't these files be owned by a real user and group to prevent any possible tracking/future ownership and potential security issues? Using most recent distribution release and gtk2-engines-aurora Version 1.5.1-1 0: ls -al /usr/share/themes/Aurora/gtk-2.0 total 20 drwxr-xr-x 2 999 999 4096 2010-05-02 12:33 . drwxr-xr-x 4 999 999 4096 2010-05-02 12:33 .. -rw-r--r-- 1 999 999 12045 2009-05-15 06:05 gtkrc sudo find / -xdev \( -nouser -o -nogroup \) -print /usr/lib/gtk-2.0/2.10.0/engines/libaurora.so /usr/share/doc/gtk2-engines-aurora /usr/share/doc/gtk2-engines-aurora/copyright /usr/share/doc/gtk2-engines-aurora/README /usr/share/doc/gtk2-engines-aurora/NEWS.gz /usr/share/doc/gtk2-engines-aurora/AUTHORS /usr/share/doc/gtk2-engines-aurora/changelog.gz /usr/share/themes/Aurora ... ** Affects: gtk2-engines-aurora (Ubuntu) Importance: Undecided Status: New -- package installed with nouser and nogroup perms, just id 999 https://bugs.launchpad.net/bugs/607293 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs