Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Boostnote .deb package changes filesystem permissions to 775 #33

Open
thomwiggers opened this issue Jul 8, 2018 · 0 comments
Open

Boostnote .deb package changes filesystem permissions to 775 #33

thomwiggers opened this issue Jul 8, 2018 · 0 comments

Comments

@thomwiggers
Copy link

The boostnote .deb file sets various filesystem permissions to 775. This is a big security problem.

As noted when you install the boostnote-bin AUR package:

(1/1) installing boostnote-bin [############################################################################] 100% 
warning: directory permissions differ on /usr/ filesystem: 755 package: 775 
warning: directory permissions differ on /usr/share/ filesystem: 755 package: 775
warning: directory permissions differ on /usr/bin/ filesystem: 755 package: 775 
warning: directory permissions differ on /usr/share/doc/ filesystem: 755 package: 775 
warning: directory permissions differ on /usr/share/pixmaps/ filesystem: 755 package: 775 
warning: directory permissions differ on /usr/share/applications/ filesystem: 755 package: 775

This is probably caused by a huge bug in npm: npm/npm#9359

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant