On Thu, May 11, 2006 at 11:03:21AM -0700, Debian Bug Tracking System <[EMAIL
PROTECTED]> wrote:
> It has been closed by one of the developers, namely
> Fumitoshi UKAI <[EMAIL PROTECTED]>.
I think that was way too fast :(
> Subject: Re: Bug#335779: /usr/lib/ruby/1.8/debian.rb:77: warning: Insecure
> world writable dir /tmp/., mode 041777
> > If this indeed is a valid warning, this would probably indicate a bug, as
> > using /tmp in an insecure way is not a problem of /tmp permissions, but of
> > program logic.
>
> I think this is because of your wrong PATH settings.
"." is a perfectly acceptable and valid component for $PATH.
There is nothing "wrong" about it as you wrongly :) imply...
> The line debian.rb:77, it just call
> system('/usr/bin/dpkg', '--compare-versions', a, rel, b)
>
> Here, ruby complains if there are insecure directory in $PATH, even if
> executable that is trying to be executed by system(3) is specified
> by absolute path.
Thats obviously a bug in ruby. It complains about a nonexistant insecurity
that simply isn't there.
Regardless of what is in my PATH, and wether it is supported or according
to our taste, the warning is bogus.
So the bug is valid in any case, and it should not be closed.
> It might be fixed by fixing $PATH in debian.rb, but I believe you should not
> put . in $PATH and it would be nice warnings.
As you said for yourself, the warning is _bogus_ and has no meaning, at
least in this case, and regardless of the $PATH, because its not involved.
--
The choice of a
-----==- _GNU_
----==-- _ generation Marc Lehmann
---==---(_)__ __ ____ __ [EMAIL PROTECTED]
--==---/ / _ \/ // /\ \/ / http://schmorp.de/
-=====/_/_//_/\_,_/ /_/\_\ XX11-RIPE
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
