Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#44822 - [vi] /var/lib/ex is mode 1777
Attached to Project:
Arch Linux
Opened by Hugo Osvaldo Barrera (hobarrera) - Sunday, 03 May 2015, 04:43 GMT
Last edited by Evangelos Foutras (foutrelis) - Monday, 04 May 2015, 06:02 GMT
Opened by Hugo Osvaldo Barrera (hobarrera) - Sunday, 03 May 2015, 04:43 GMT
Last edited by Evangelos Foutras (foutrelis) - Monday, 04 May 2015, 06:02 GMT
|
DetailsDescription:
The vi package includes directory /var/lib/ex, with permission 777. This is a very huge security risk, since any user can write into this directory. |
This task depends upon
Closed by Evangelos Foutras (foutrelis)
Monday, 04 May 2015, 06:02 GMT
Reason for closing: Not a bug
Monday, 04 May 2015, 06:02 GMT
Reason for closing: Not a bug
Comment by Evangelos Foutras (foutrelis) -
Sunday, 03 May 2015, 05:25 GMT
It's always been like that and it's intentional. The /var/lib/ex directory has the same permissions as /tmp (1777) and is used by the "preserve" vi command to temporarily store the buffer contents.