Mailinglist Archive: opensuse-security (220 mails)

< Previous Next >
KDE wrong file permissions (was: SUSE Security Announcement: sane (SuSE-SA:2003:046))
  • From: Reiner Steib <4.uce.03.r.s@xxxxxxxxxxxxxx>
  • Date: Tue, 18 Nov 2003 18:25:56 +0100
  • Message-id: <v9oev97fmj.fsf@xxxxxxxxxxxxxxxxxxxxxxxxxx>
On Tue, Nov 18 2003, Thomas Biege wrote:

> - KDE wrong file permissions
> Due to a missing synchronisation during SuSE Linux 8.2 beta-testing
> phase some configuration files of KDE on SuSE Linux 8.2 are world-
> writeable. Please check the files in /etc/opt/kde3/share/config
> and add an appropritae line to /etc/permissions.local, like:
> /etc/opt/kde3/share/config/kmailrc root.root 0644
> /etc/opt/kde3/share/config/kioslaverc root.root 0644
> /etc/opt/kde3/share/config/kdeglobals root.root 0644
> Set the new permission with 'chkstat -set /etc/permissions.local'
> as root.

Each time you run `/sbin/conf.d/SuSEconfig.kde', you get the wrong
permissions back until you (or cron daemon) runs `chkstat' again.

I'd suggest to replace "0666" by "0644" [1] in `SuSEconfig.kde' and
re-run `SuSEconfig -module kde'.

Bye, Reiner.

[1]
--8<---------------cut here---------------start------------->8---
--- SuSEconfig.kde.orig 2003-02-18 23:34:20.000000000 +0100
+++ SuSEconfig.kde 2003-11-18 18:20:04.000000000 +0100
@@ -54,5 +54,5 @@
echo "NoProxyFor=$NO_PROXY" >> ${kdeconfigdir}/kioslaverc.SuSEconfig

-chmod 0666 ${kdeconfigdir}/kioslaverc.SuSEconfig
+chmod 0644 ${kdeconfigdir}/kioslaverc.SuSEconfig
check_md5_and_move ${kdeconfigdir}/kioslaverc

@@ -83,5 +83,5 @@
fi

-chmod 0666 ${kdeconfigdir}/kmailrc.SuSEconfig
+chmod 0644 ${kdeconfigdir}/kmailrc.SuSEconfig
check_md5_and_move ${kdeconfigdir}/kmailrc

@@ -100,5 +100,5 @@
fi

-chmod 0666 ${kdeconfigdir}/kdeglobals.SuSEconfig
+chmod 0644 ${kdeconfigdir}/kdeglobals.SuSEconfig
check_md5_and_move ${kdeconfigdir}/kdeglobals
exit 0
--8<---------------cut here---------------end--------------->8---
--
,,,
(o o)
---ooO-(_)-Ooo--- PGP key available via WWW http://rsteib.home.pages.de/

< Previous Next >
References