Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1020512

Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable

Cross-posted to 2 groups.

Show all headers | View raw

Package: debian-policy

Hi,

10.9 Permissions and owners currently says

| Files should be owned by root:root, and made writable only by the
| owner and universally readable (and executable, if appropriate),
| that is mode 644 or 755."

However most files shouldn't be modified as modifications will just be
lost (e.g. everything installed by the package manager that isn't
handled as a conffile).  It also gives more permissions than the
minimum needed.

I think static files should not be writable instead, so every file
under /usr (and /bin, /sbin, /lib*; or everything dpkg installs that is
not a conffile) should have 444 (or 555).

Ansgar

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Ansgar <ansgar@debian.org> - 2020-08-04 14:30 +0200
  Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Russ Allbery <rra@debian.org> - 2020-08-04 23:10 +0200
    Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Guillem Jover <guillem@debian.org> - 2020-08-05 00:00 +0200
      Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Russ Allbery <rra@debian.org> - 2020-08-05 00:10 +0200
      Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Ansgar <ansgar@debian.org> - 2020-08-05 01:10 +0200
        Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Sam Hartman <hartmans@debian.org> - 2020-08-05 22:10 +0200
        Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Guillem Jover <guillem@debian.org> - 2020-08-06 12:30 +0200
  Bug#967857: debian-policy: [Files/Permissions and owners] files installed by package manager should not be writable Bill Allombert <ballombe@debian.org> - 2020-08-04 23:30 +0200

csiph-web