Bug ID | 1171164 |
---|---|
Summary | permission handling: %_libexecdir changes from /usr/lib to /usr/libexec |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | dimstar@opensuse.org |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
In accordance to FHS-3.0, libexecdir is being changed from /usr/lib to /usr/libexec. The permission definitiions lists files in /usr/lib, which are now moving, e.g: the dbus-1 package now fails with: [ 277s] dbus-1.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/libexec/dbus-1/dbus-daemon-launch-helper is packaged with setuid/setgid bits (04750) [ 277s] If the package is intended for inclusion in any SUSE product [ 277s] please open a bug report to request review of the program by the [ 277s] security team. Please refer to [ 277s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 277s] more information. The file used to be /usr/lib/dbus-1/dbus-daemon-launch-helper (on 32bit and 64 bit systems) We need to list those /usr/lib/* things also as /usr/libexec (for a migration time probably in parallel, to not dead-lock future changes)