Public bug reported:
Binary package hint: gtk2-engines-aurora
Shouldn't these files be owned by a real user and group to prevent any
possible tracking/future ownership and potential security issues? Using
most recent distribution release and gtk2-engines-aurora Version 1.5.1-1
0:
ls -al /usr/share/themes/Aurora/gtk-2.0
total 20
drwxr-xr-x 2 999 999 4096 2010-05-02 12:33 .
drwxr-xr-x 4 999 999 4096 2010-05-02 12:33 ..
-rw-r--r-- 1 999 999 12045 2009-05-15 06:05 gtkrc
sudo find / -xdev \( -nouser -o -nogroup \) -print
/usr/lib/gtk-2.0/2.10.0/engines/libaurora.so
/usr/share/doc/gtk2-engines-aurora
/usr/share/doc/gtk2-engines-aurora/copyright
/usr/share/doc/gtk2-engines-aurora/README
/usr/share/doc/gtk2-engines-aurora/NEWS.gz
/usr/share/doc/gtk2-engines-aurora/AUTHORS
/usr/share/doc/gtk2-engines-aurora/changelog.gz
/usr/share/themes/Aurora
...
** Affects: gtk2-engines-aurora (Ubuntu)
Importance: Undecided
Status: New
--
package installed with nouser and nogroup perms, just id 999
https://bugs.launchpad.net/bugs/607293
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
