FS#7272 : some packages have *.a files with 755 permissions

FS#7272 - some packages have *.a files with 755 permissions

Attached to Project: Arch Linux
Opened by Roman Kyrylych (Romashka) - Friday, 25 May 2007, 17:50 GMT
Last edited by Dan McGee (toofishes) - Thursday, 05 February 2009, 02:54 GMT

Task Type	Bug Report
Category	Packages: Extra
Status	Closed
Assigned To	Tobias Kieslich (tobias) Tobias Powalowski (tpowa) Jan de Groot (JGC) Aaron Griffin (phrakture) Alexander Baldeck (kth5) Thomas Bächler (brain0) Dan McGee (toofishes) Hugo Doria (hdoria) Thayer Williams (thayer)
Architecture	All
Severity	Medium
Priority	Normal
Reported Version	2007.05 Duke
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	0
Private	No

Details

[roman@home ~]$ find /usr/lib/*.a -perm 755
/usr/lib/libX11.a
/usr/lib/libXv.a
/usr/lib/libXvMCNVIDIA.a
/usr/lib/libncurses++.a
/usr/lib/libncurses++w.a
/usr/lib/libnotify.a
/usr/lib/libnspr4.a
/usr/lib/libplc4.a
/usr/lib/libplds4.a

This task depends upon

Closed by Dan McGee (toofishes)
Thursday, 05 February 2009, 02:54 GMT
Reason for closing: Deferred
Additional comments about closing: See comments.

Comment by Attila (attila) - Friday, 25 May 2007, 18:58 GMT

At first thanks for the motivation to do the same. I extend your search to "find /usr/lib/*.a -perm 755 -exec pacman -Qo {} \;" and after looking in some of the PKGBUILD's i must say that my little test shows that the arch devs can't do anything against it because they use the normal "make && make install" game. So this file permission has perhaps a reason or be a bug of the original software. But this be only my 2 cent.

Comment by Jens Adam (byte) - Friday, 25 May 2007, 19:17 GMT

/usr/lib/libX11.a is owned by libx11 1.1.1-4
/usr/lib/libXv.a is owned by libxv 1.0.3-1
/usr/lib/libncurses++.a is owned by ncurses 5.6-1
/usr/lib/libncurses++w.a is owned by ncurses 5.6-1
/usr/lib/libnspr4.a is owned by nspr 4.6.6-1
/usr/lib/libparted.a is owned by parted 1.8.6-1
/usr/lib/libplc4.a is owned by nspr 4.6.6-1
/usr/lib/libplds4.a is owned by nspr 4.6.6-1
/usr/lib/libz.a is owned by zlib 1.2.3-1

Comment by Roman Kyrylych (Romashka) - Friday, 25 May 2007, 19:17 GMT

libz is already fixed now

Comment by Andrew Fyfe (space-m0nkey) - Friday, 25 May 2007, 19:29 GMT

find /usr/lib -name *.a -type f ! -perm 644 -a ! -perm 444 -exec pacman -Qo {} \;

/usr/lib/samba/libsmbclient.a is owned by smbclient 3.0.25A-1
/usr/lib/libpng12.a is owned by libpng 1.2.18-1
/usr/lib/libgnomesharpglue-2.a is owned by gnome-sharp 2.16.0-2
/usr/lib/libvtesharpglue-2.a is owned by gnome-sharp 2.16.0-2
/usr/lib/libgtkspell.a is owned by gtkspell 2.0.11-2
/usr/lib/libfakeroot/libfakeroot.a is owned by fakeroot 1.5.10-2

Comment by Eric Belanger (Snowman) - Friday, 21 September 2007, 05:49 GMT

libpng and fakeroot are also fixed

Comment by Allan McRae (Allan) - Thursday, 13 December 2007, 01:46 GMT

/usr/lib/libXv.a is owned by libxv 1.0.3-1
/usr/lib/libncurses++.a is owned by ncurses 5.6-6
/usr/lib/libncurses++w.a is owned by ncurses 5.6-6
/usr/lib/libnotify.a is owned by libnotify 0.4.4-1
/usr/lib/libnspr4.a is owned by nspr 4.6.7-1
/usr/lib/libplc4.a is owned by nspr 4.6.7-1
/usr/lib/libplds4.a is owned by nspr 4.6.7-1

Comment by Gavin Bisesi (Daenyth) - Friday, 25 April 2008, 19:59 GMT

[root@Muspelheimr ~]# find /usr/lib -name *.a -type f ! -perm 644 -a ! -perm 444 -exec pacman -Qo {} \;
/usr/lib/libfltk_gl.a is owned by fltk 1.1.8-1
/usr/lib/libfltk_forms.a is owned by fltk 1.1.8-1
/usr/lib/libXvMCW.a is owned by libxvmc 1.0.4-1
/usr/lib/libXvMC.a is owned by libxvmc 1.0.4-1
/usr/lib/libfltk_images.a is owned by fltk 1.1.8-1
/usr/lib/libXv.a is owned by libxv 1.0.3-1
/usr/lib/libfltk.a is owned by fltk 1.1.8-1
/usr/lib/samba/libsmbclient.a is owned by smbclient 3.0.28A-1
/usr/lib/libncurses++.a is owned by ncurses 5.6-6
/usr/lib/libnotify.a is owned by libnotify 0.4.4-1
/usr/lib/libncurses++w.a is owned by ncurses 5.6-6
/usr/lib/libx86.a is owned by libx86 0.99-1
/usr/lib/libespeak.a is owned by espeak 1.37-1
/usr/lib/libXvMCNVIDIA.a is owned by nvidia-utils 169.12-1

Comment by Tobias Powalowski (tpowa) - Tuesday, 29 April 2008, 10:19 GMT

[tobias@T-POWA-LX ~]$ find /usr/lib -name *.a -type f ! -perm 644 -a ! -perm 444 -exec pacman -Qo {} \;
/usr/lib/libfltk.a ist in fltk 1.1.8-1 enthalten
/usr/lib/samba/libsmbclient.a ist in smbclient 3.0.28A-1 enthalten
/usr/lib/libXvMCW.a ist in libxvmc 1.0.4-1 enthalten
/usr/lib/libncurses++w.a ist in ncurses 5.6-6 enthalten
/usr/lib/libdmraid.a ist in dmraid 1.0.0.rc14-4 enthalten
/usr/lib/libncurses++.a ist in ncurses 5.6-6 enthalten
/usr/lib/libfltk_forms.a ist in fltk 1.1.8-1 enthalten
/usr/lib/libx86.a ist in libx86 0.99-1 enthalten
/usr/lib/libXvMC.a ist in libxvmc 1.0.4-1 enthalten
/usr/lib/libgtkspell.a ist in gtkspell 2.0.11-2 enthalten
/usr/lib/libfltk_images.a ist in fltk 1.1.8-1 enthalten
/usr/lib/libXvMCNVIDIA.a ist in nvidia-utils 169.12-1 enthalten

Comment by Gavin Bisesi (Daenyth) - Wednesday, 04 June 2008, 18:05 GMT

daenyth@Muspelheimr ~ $ find /usr/lib -name *.a -type f ! -perm 644 -a ! -perm 444 -exec pacman -Qo {} \;
/usr/lib/libfltk_gl.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_forms.a is owned by fltk 1.1.9-1
/usr/lib/libXvMCW.a is owned by libxvmc 1.0.4-1
/usr/lib/libXvMC.a is owned by libxvmc 1.0.4-1
/usr/lib/libfltk_images.a is owned by fltk 1.1.9-1
/usr/lib/libfltk.a is owned by fltk 1.1.9-1
/usr/lib/samba/libsmbclient.a is owned by smbclient 3.0.28A-1
/usr/lib/libncurses++.a is owned by ncurses 5.6-6
/usr/lib/libncurses++w.a is owned by ncurses 5.6-6
/usr/lib/libx86.a is owned by libx86 0.99-1
/usr/lib/libespeak.a is owned by espeak 1.37-1
/usr/lib/libXvMCNVIDIA.a is owned by nvidia-utils 169.12-1

Comment by Jan de Groot (JGC) - Wednesday, 02 July 2008, 09:21 GMT

Affected packages on my system:
dmraid
fltk
libx86
libxvmc
ncurses
smbclient

Comment by Gavin Bisesi (Daenyth) - Friday, 15 August 2008, 19:44 GMT

daenyth@Muspelheimr ~ $ find /usr/lib -name *.a -type f ! -perm 644 -a ! -perm 444 -exec pacman -Qo {} \; | cut -d ' ' -f 5 | sort -u
espeak
fltk
libx86
libxvmc
ncurses
nvidia-utils
smbclient
zlib

Comment by Allan McRae (Allan) - Monday, 01 September 2008, 06:42 GMT

fixed ncurses

Comment by Tobias Powalowski (tpowa) - Sunday, 05 October 2008, 18:16 GMT

fixed dmraid and smbclient

Comment by Jens Adam (byte) - Sunday, 05 October 2008, 21:03 GMT

I'd like to add xdelta.

Comment by Jens Adam (byte) - Monday, 06 October 2008, 09:02 GMT

... and gocr.

Comment by Glenn Matthys (RedShift) - Friday, 05 December 2008, 23:19 GMT

What's the status of this issue?

Comment by Aaron Griffin (phrakture) - Monday, 08 December 2008, 23:49 GMT

Task reassigned to Aaron Griffin (phrakture), Thomas Bächler (brain0), Jan de Groot (JGC), Alexander Baldeck (kth5), Dan McGee (toofishes), Tobias Powalowski (tpowa), Aaron Griffin (phrakture)

Dan, can we do anything about this at the makepkg level? I know we already have some special case code for library handling... so perhaps some chmod'ing might fix this.

Comment by Eric Belanger (Snowman) - Tuesday, 09 December 2008, 00:43 GMT

I think a better solution would be to have namcap check for this.

Comment by Dan McGee (toofishes) - Tuesday, 09 December 2008, 00:58 GMT

Yeah, makepkg strips libraries and executables of debug symbols, but it doesn't do any permissions munging (ever). I'd be wary of doing this at the makepkg level- I'm with Eric and think namcap would be a better candidate for checking this.

Comment by Gavin Bisesi (Daenyth) - Tuesday, 09 December 2008, 03:01 GMT

-1 on makepkg-level
+1 on namcap

Comment by Dan McGee (toofishes) - Tuesday, 09 December 2008, 03:03 GMT

On a related note- do we have an active namcap maintainer, or are there any new devs that want to take this under their arm?

Comment by Allan McRae (Allan) - Tuesday, 09 December 2008, 03:24 GMT

Adding modules to namcap is very easy for anyone who want to use their python skills. (I added one on the day I "learnt" python.) This would be a good first patch for anyone looking at contributing.

I already have push access to namcap so if no-one else volunteers to be the active maintainer...

Comment by Glenn Matthys (RedShift) - Tuesday, 09 December 2008, 09:26 GMT

Added the namcap maintainer to the list of assignees.

Comment by Andrea Scarpino (BaSh) - Thursday, 11 December 2008, 12:43 GMT

$ find /usr/lib/*.a -perm 755
/usr/lib/libx86.a is owned by zlib 1.2.3.3-2
/usr/lib/libz.a is owned by libx86 1.1-1

Comment by Andrea Scarpino (BaSh) - Thursday, 11 December 2008, 12:44 GMT

$ find /usr/lib/*.a -perm 755
/usr/lib/libx86.a is owned by libx86 1.1-1
/usr/lib/libz.a is owned by zlib 1.2.3.3-2

Comment by Thayer Williams (thayer) - Thursday, 11 December 2008, 17:06 GMT

fixed libx86

Comment by Andrea Scarpino (BaSh) - Friday, 12 December 2008, 19:05 GMT

/usr/lib/libXvMC.a is owned by libxvmc 1.0.4-1
/usr/lib/libXvMCNVIDIA.a is owned by nvidia-utils 177.82-1
/usr/lib/libXvMCW.a is owned by libxvmc 1.0.4-1

Comment by Anonymous Submitter - Friday, 12 December 2008, 19:10 GMT

[voidnull@home ~]$ pacman -Qo $(find /usr/lib/*.a -perm 755)
/usr/lib/libXvMC.a is owned by libxvmc 1.0.4-1
/usr/lib/libXvMCNVIDIA.a is owned by nvidia-utils 177.82-1
/usr/lib/libXvMCW.a is owned by libxvmc 1.0.4-1
/usr/lib/libfltk.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_forms.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_gl.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_images.a is owned by fltk 1.1.9-1
/usr/lib/libopal_s.a is owned by opal 3.4.2-1
/usr/lib/libz.a is owned by zlib 1.2.3.3-2

Comment by Andrea Scarpino (BaSh) - Friday, 12 December 2008, 19:16 GMT

and...
/usr/lib/libPgm2asc.a is owned by gocr 0.45-1
/usr/lib/libfltk.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_forms.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_gl.a is owned by fltk 1.1.9-1
/usr/lib/libfltk_images.a is owned by fltk 1.1.9-1

Comment by Glenn Matthys (RedShift) - Friday, 12 December 2008, 19:23 GMT

Field changed: Severity (Low → Medium)
Task reassigned to Aaron Griffin (phrakture), Thomas Bächler (brain0), Hugo Doria (hdoria), Jan de Groot (JGC), Alexander Baldeck (kth5), Pierre Schmitz (Pierre), Thayer Williams (thayer), Tobias Kieslich (tobias), Dan McGee (toofishes), Tobias Powalowski (tpowa), Aaron Griffin (phrakture)

Added Tobias for fltk. Raised severity because it has been decided a long time ago that .a files have to go.

Comment by Pierre Schmitz (Pierre) - Sunday, 28 December 2008, 20:43 GMT

fixed with zlib 1.2.3.3-3

Comment by Hugo Doria (hdoria) - Wednesday, 21 January 2009, 20:48 GMT

I created a patch to make namcap check the packages and look for *.a files with 755 permission. Please, take a look since this is my first patch to namcap.