Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#23367 - [attr] files are owned by 'nobody:nobody'
Attached to Project:
Arch Linux
Opened by Mathijs Kwik (bluescreen303) - Sunday, 20 March 2011, 17:24 GMT
Last edited by Allan McRae (Allan) - Sunday, 20 March 2011, 22:34 GMT
Opened by Mathijs Kwik (bluescreen303) - Sunday, 20 March 2011, 17:24 GMT
Last edited by Allan McRae (Allan) - Sunday, 20 March 2011, 22:34 GMT
|
Detailsit seems that (at least on x86_64) the files belonging to the xattr packages are owned by:
user nobody group nobody and permissions are 644/755, making them writable for user nobody. since nobody is mostly used for daemons and to allow anonymous access, this is a potential security risk. |
This task depends upon
Closed by Allan McRae (Allan)
Sunday, 20 March 2011, 22:34 GMT
Reason for closing: Fixed
Additional comments about closing: attr-2.4.44-3
Sunday, 20 March 2011, 22:34 GMT
Reason for closing: Fixed
Additional comments about closing: attr-2.4.44-3
Comment by Greg (dolby) -
Sunday, 20 March 2011, 22:14 GMT
Same in i686