Date: Sat, 14 Apr 2007 06:05:32 GMT From: Joe Marcus Clarke <marcus@FreeBSD.org> To: poming168@hotmail.com, marcus@FreeBSD.org, gnome@FreeBSD.org Subject: Re: ports/111528: converters/libiconv: incorrect 777 permission Message-ID: <200704140605.l3E65Wdc063961@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
Synopsis: converters/libiconv: incorrect 777 permission State-Changed-From-To: open->closed State-Changed-By: marcus State-Changed-When: Sat Apr 14 06:00:52 UTC 2007 State-Changed-Why: This is a problem with versions of BSD tar that preserve permissions. However, it is not unique to FreeBSD. Even if we were to chmod the directory post-extract, we would still be vulnerable to a small window where files could be replaced. Since the issues is with the permissions in the dist tarball, this needs to be raised with the libiconv authors. http://www.freebsd.org/cgi/query-pr.cgi?pr=111528
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704140605.l3E65Wdc063961>