Bug 10501

Summary: drakfont writes files with root right
Product: Mageia Reporter: Daniel Osmari <danielosmari>
Component: RPM PackagesAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED DUPLICATE QA Contact:
Severity: normal    
Priority: Normal CC: thierry.vignaud, unruh
Version: 3   
Target Milestone: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Source RPM: drakxtools-15.54-1.mga3 CVE:
Status comment:

Description Daniel Osmari 2013-06-11 23:58:58 CEST 
Description of problem:
When importing fonts drakfont writes files to the root. Example:


# ls -la /ttc

-rwxrwxrwx 1 root root 15323200 Jun 11 17:46 /ttc*


Another user in #mageia reported a slightly different file:


<DavidWHodgins>	Hmm. Just ran the import again, and this time it created a "Type1" file in the / dir, but -rw-r--r-- for perms, so there is some leakage in it some where.



How reproducible:

Just import fonts with drakfont. Importing .ttf fonts directly seems to create '/Type1' file; the "Get Windows Fonts" button seems to generate the world-writable '/ttc' file.

Steps to Reproduce:
1. Run drakfont
2.1a Click "Get Windows Fonts"
or
2.1b Click "Import", select a .ttf font to import, then "Install".
3. Check the root of the filesystem.

Reproducible: 

Steps to Reproduce:
Comment 1 Manuel Hiebel 2013-06-30 11:57:42 CEST 
seems somewhere in these change http://svnweb.mageia.org/soft/drakx/trunk/perl-install/standalone/drakfont?r1=3694&r2=6757

CC: (none) => thierry.vignaud

Manuel Hiebel 2014-07-20 11:15:55 CEST

Summary: drakfont writes files to the root => drakfont writes files with root right

Comment 2 Manuel Hiebel 2014-07-20 11:16:12 CEST 
*** Bug 13310 has been marked as a duplicate of this bug. ***

CC: (none) => unruh

Comment 3 Marja Van Waes 2015-03-31 16:03:36 CEST 
Mageia 3 changed to end-of-life (EOL) status 4 months ago.
http://blog.mageia.org/en/2014/11/26/lets-say-goodbye-to-mageia-3/ 

Mageia 3 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of Mageia
please feel free to click on "Version" change it against that version of Mageia
and reopen this bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

--
The Mageia Bugsquad

Status: NEW => RESOLVED
Resolution: (none) => OLD

Comment 4 Thierry Vignaud 2015-06-03 11:12:23 CEST 
Fixed along bug #16074

*** This bug has been marked as a duplicate of bug 16074 ***

Resolution: OLD => DUPLICATE

Comment 5 Mageia Robot 2015-06-03 18:13:20 CEST 
commit b6e862baada2150b90964a79fca55c2b36924b9d
Author: Thierry Vignaud <thierry.vignaud@...>
Date:   Thu May 28 21:48:11 2015 -0400

    fix moving fonts (mga#16074)
    
    bug introduced in commit fa7f54e968cebad63914465a603aa65eef9af1be
    
    also do not create files in / (mga#10501, mga#15996)
---
 Commit Link:
   http://gitweb.mageia.org/software/drakx/commit/?id=b6e862baada2150b90964a79fca55c2b36924b9d

 Bug links:
   Mageia
      https://bugs.mageia.org/10501
      https://bugs.mageia.org/15996
      https://bugs.mageia.org/16074
Comment 6 Mageia Robot 2015-06-03 19:52:25 CEST 
commit 480be722cbbce713c93341492ac94211f6165c9e
Author: Thierry Vignaud <thierry.vignaud@...>
Date:   Thu May 28 21:48:11 2015 -0400

    fix moving fonts (mga#16074)
    
    bug introduced in commit fa7f54e968cebad63914465a603aa65eef9af1be
    
    also do not create files in / (mga#10501, mga#15996)
---
 Commit Link:
   http://gitweb.mageia.org/software/drakx/commit/?id=480be722cbbce713c93341492ac94211f6165c9e

 Bug links:
   Mageia
      https://bugs.mageia.org/10501
      https://bugs.mageia.org/15996
      https://bugs.mageia.org/16074