Package: r-base-core
Version: 3.5.2-1
Severity: normal

Hi Dirk,

The /usr/local/lib/R directory (and its site-library subdir), as created by the
postinst script of r-base-core, is always owned by group staff, with
permissions 2775.

This is a violation of Debian Policy §9.1.2. Those specific ownership and
permissions should only be set when the file /etc/staff-group-for-usr-local
is present. When it is not, the directory should be owned by root:root and have
permissions 0755.

Note that, since buster, new installations do not have
/etc/staff-group-for-usr-local by default, which makes this bug biting more
often.

Best,

--
⢀⣴⠾⠻⢶⣦⠀  Sébastien Villemot
⣾⠁⢠⠒⠀⣿⡁  Debian Developer
⢿⡄⠘⠷⠚⠋⠀  https://sebastien.villemot.name
⠈⠳⣄⠀⠀⠀⠀  https://www.debian.org

Reply via email to