Package: python-moinmoin
Version: 1.7.1-3+lenny5
Severity: minor

In the latest moin security NMU release for Lenny the permissions on e.g.
/usr/share/moin/underlay/pages/LocalSpellingWords/* changed for no apparent
reason, AFAICT.

They used to be world readable but now they are only readable by the
owner/group (=root). However, if I manually fetch the source from
security.debian.org and rebuild the package the resulting permissions are
correct!

Reinstalling the official package breaks permissions again, so I'm pretty sure
it is not just me screwing up.
Comparing Lintian output for the two latest versions indicate further
permission changes that may be unintended: 
# ~ > lintian /var/cache/apt/archives/python-moinmoin_1.7.1-3+lenny5_all.deb 
W: python-moinmoin: binary-without-manpage usr/bin/moin
W: python-moinmoin: non-standard-file-perm etc/moin/farmconfig.py 0640 != 0644
W: python-moinmoin: non-standard-file-perm etc/moin/mywiki.py 0640 != 0644
W: python-moinmoin: embedded-javascript-library 
usr/share/doc/python-moinmoin/examples/FCKeditor/fckeditor.js.gz
W: python-moinmoin: non-standard-file-perm 
usr/share/moin/htdocs/applets/FCKeditor/README 0640 != 0644
W: python-moinmoin: non-standard-dir-perm 
usr/share/moin/underlay/pages/LocalSpellingWords/ 0750 != 0755
W: python-moinmoin: non-standard-file-perm 
usr/share/moin/underlay/pages/LocalSpellingWords/current 0640 != 0644
W: python-moinmoin: non-standard-dir-perm 
usr/share/moin/underlay/pages/LocalSpellingWords/revisions/ 0750 != 0755
W: python-moinmoin: non-standard-file-perm 
usr/share/moin/underlay/pages/LocalSpellingWords/revisions/00000001 0640 != 0644
N: 4 tags overridden (4 warnings)

where 1.7.1-3+lenny4 did not include any of the *-perm warnings.

I deploy moin wikis programmatically from an unprivileged user account so the
permissions cause some copy problems, but otherwise I suppose it may be a minor
problem. So please feel free to adjust the severity as you see fit.

Thanks!

Cheers, Jonas

-- System Information:
Debian Release: 5.0.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages python-moinmoin depends on:
ii  python                       2.5.2-3     An interactive high-level object-o
ii  python-support               0.8.4lenny2 automated rebuilding support for P

Versions of packages python-moinmoin recommends:
ii  exim4-daemon-light [ma 4.69-9            lightweight Exim MTA (v4) daemon
pn  python-xapian          <none>            (no description available)
ii  python-xml             0.8.4-10.1+lenny1 XML tools for Python

Versions of packages python-moinmoin suggests:
pn  antiword                 <none>          (no description available)
ii  apache2                  2.2.9-10+lenny8 Apache HTTP Server metapackage
ii  apache2-mpm-prefork [htt 2.2.9-10+lenny8 Apache HTTP Server - traditional n
pn  catdoc                   <none>          (no description available)
pn  python-4suite-xml        <none>          (no description available)
ii  python-docutils          0.5-2+lenny1    Utilities for the documentation of
pn  python-gdchart           <none>          (no description available)
pn  python-pyxmpp            <none>          (no description available)
ii  wamerican [wordlist]     6-2.3           American English dictionary words 

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to