Bug 10501 - drakfont writes files with root right
Summary: drakfont writes files with root right
Status: RESOLVED DUPLICATE of bug 16074
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 3
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords:
: 13310 (view as bug list)
Depends on:
Blocks:
 
Reported: 2013-06-11 23:58 CEST by Daniel Osmari
Modified: 2015-06-03 19:52 CEST (History)
2 users (show)

See Also:
Source RPM: drakxtools-15.54-1.mga3
CVE:
Status comment:


Attachments

Description Daniel Osmari 2013-06-11 23:58:58 CEST
Description of problem:
When importing fonts drakfont writes files to the root. Example:


# ls -la /ttc

-rwxrwxrwx 1 root root 15323200 Jun 11 17:46 /ttc*


Another user in #mageia reported a slightly different file:


<DavidWHodgins>	Hmm. Just ran the import again, and this time it created a "Type1" file in the / dir, but -rw-r--r-- for perms, so there is some leakage in it some where.



How reproducible:

Just import fonts with drakfont. Importing .ttf fonts directly seems to create '/Type1' file; the "Get Windows Fonts" button seems to generate the world-writable '/ttc' file.

Steps to Reproduce:
1. Run drakfont
2.1a Click "Get Windows Fonts"
or
2.1b Click "Import", select a .ttf font to import, then "Install".
3. Check the root of the filesystem.

Reproducible: 

Steps to Reproduce:
Comment 1 Manuel Hiebel 2013-06-30 11:57:42 CEST
seems somewhere in these change http://svnweb.mageia.org/soft/drakx/trunk/perl-install/standalone/drakfont?r1=3694&r2=6757

CC: (none) => thierry.vignaud

Manuel Hiebel 2014-07-20 11:15:55 CEST

Summary: drakfont writes files to the root => drakfont writes files with root right

Comment 2 Manuel Hiebel 2014-07-20 11:16:12 CEST
*** Bug 13310 has been marked as a duplicate of this bug. ***

CC: (none) => unruh

Comment 3 Marja Van Waes 2015-03-31 16:03:36 CEST
Mageia 3 changed to end-of-life (EOL) status 4 months ago.
http://blog.mageia.org/en/2014/11/26/lets-say-goodbye-to-mageia-3/ 

Mageia 3 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of Mageia
please feel free to click on "Version" change it against that version of Mageia
and reopen this bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

--
The Mageia Bugsquad

Status: NEW => RESOLVED
Resolution: (none) => OLD

Comment 4 Thierry Vignaud 2015-06-03 11:12:23 CEST
Fixed along bug #16074

*** This bug has been marked as a duplicate of bug 16074 ***

Resolution: OLD => DUPLICATE

Comment 5 Mageia Robot 2015-06-03 18:13:20 CEST
commit b6e862baada2150b90964a79fca55c2b36924b9d
Author: Thierry Vignaud <thierry.vignaud@...>
Date:   Thu May 28 21:48:11 2015 -0400

    fix moving fonts (mga#16074)
    
    bug introduced in commit fa7f54e968cebad63914465a603aa65eef9af1be
    
    also do not create files in / (mga#10501, mga#15996)
---
 Commit Link:
   http://gitweb.mageia.org/software/drakx/commit/?id=b6e862baada2150b90964a79fca55c2b36924b9d

 Bug links:
   Mageia
      https://bugs.mageia.org/10501
      https://bugs.mageia.org/15996
      https://bugs.mageia.org/16074
Comment 6 Mageia Robot 2015-06-03 19:52:25 CEST
commit 480be722cbbce713c93341492ac94211f6165c9e
Author: Thierry Vignaud <thierry.vignaud@...>
Date:   Thu May 28 21:48:11 2015 -0400

    fix moving fonts (mga#16074)
    
    bug introduced in commit fa7f54e968cebad63914465a603aa65eef9af1be
    
    also do not create files in / (mga#10501, mga#15996)
---
 Commit Link:
   http://gitweb.mageia.org/software/drakx/commit/?id=480be722cbbce713c93341492ac94211f6165c9e

 Bug links:
   Mageia
      https://bugs.mageia.org/10501
      https://bugs.mageia.org/15996
      https://bugs.mageia.org/16074

Note You need to log in before you can comment on or make changes to this bug.