Sven Joachim writes ("Re: Bug#421792: /var/lib/dpkg/info/*.md5sums inherits 
from package"):
> Ian Jackson <[EMAIL PROTECTED]> writes:
> > These files are generated during package building as DEBIAN/md5sums,
> > and that file's permissions and ownership are inherited by the
> > installed file.  (I have just tested this with a pre-1.14.8 dpkg just
> > to be sure.)
> 
> Are you sure?  For the binutils package this does not seem to be the
> case; the version in my apt cache does not have an md5sums file.
> Probably the submitter's binutils.md5sums file was created by debsums.

I don't use debsums but I was under the impression that it just made
checks against md5sums generated from or included in .debs.  That's
what the package Description says anyway.  I see from debsums's bugs
that you're right.

> Yes, because dpkg was not even involved in creating the file; the bug
> should get reassigned to the debsums package (arguing that the
> debsums script should assure that the files it creates are
> world-readable)

Benoit: do you have debsums installed ?  

> or closed as a local misconfiguration (a umask of 077
> for root is certainly not TRT).

I think that it's a configuration which ought not to break dpkg.

Ian.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to