puredyne-team team mailing list archive
-
puredyne-team team
-
Mailing list archive
-
Message #00296
[Bug 501340] Re: insecure world-writable dir /usr (mode 040757)
Fixed in bzr rev 240, removed the chmod
** Changed in: puredyne-live
Status: Confirmed => Fix Committed
** Visibility changed to: Public
--
insecure world-writable dir /usr (mode 040757)
https://bugs.launchpad.net/bugs/501340
You received this bug notification because you are a member of puredyne
team, which is a direct subscriber.
Status in Puredyne liveCD/DVD/USB/HD: Fix Committed
Bug description:
Both in liveUSB and after install, it seems /usr is world-writable (mode 040757) which is very insecure. I've grepped around a bit but I haven't spotted why it's happening but I guess it's not deliberate - is it an artefact of broth?
Also world-writable are /sbin and /etc - none of these should be world-writable, right?
References