From owner-freebsd-gnome@FreeBSD.ORG  Sat Apr 14 06:05:32 2007
Return-Path: <owner-freebsd-gnome@FreeBSD.ORG>
X-Original-To: gnome@hub.freebsd.org
Delivered-To: freebsd-gnome@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 60D3816A401;
	Sat, 14 Apr 2007 06:05:32 +0000 (UTC)
	(envelope-from marcus@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40])
	by mx1.freebsd.org (Postfix) with ESMTP id 3D89813C44B;
	Sat, 14 Apr 2007 06:05:32 +0000 (UTC)
	(envelope-from marcus@FreeBSD.org)
Received: from freefall.freebsd.org (marcus@localhost [127.0.0.1])
	by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id l3E65W1M063965;
	Sat, 14 Apr 2007 06:05:32 GMT
	(envelope-from marcus@freefall.freebsd.org)
Received: (from marcus@localhost)
	by freefall.freebsd.org (8.13.4/8.13.4/Submit) id l3E65Wdc063961;
	Sat, 14 Apr 2007 06:05:32 GMT (envelope-from marcus)
Date: Sat, 14 Apr 2007 06:05:32 GMT
From: Joe Marcus Clarke <marcus@FreeBSD.org>
Message-Id: <200704140605.l3E65Wdc063961@freefall.freebsd.org>
To: poming168@hotmail.com, marcus@FreeBSD.org, gnome@FreeBSD.org
Cc: 
Subject: Re: ports/111528: converters/libiconv: incorrect 777 permission
X-BeenThere: freebsd-gnome@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GNOME for FreeBSD -- porting and maintaining
	<freebsd-gnome.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gnome>
List-Post: <mailto:freebsd-gnome@freebsd.org>
List-Help: <mailto:freebsd-gnome-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Apr 2007 06:05:32 -0000

Synopsis: converters/libiconv: incorrect 777 permission

State-Changed-From-To: open->closed
State-Changed-By: marcus
State-Changed-When: Sat Apr 14 06:00:52 UTC 2007
State-Changed-Why: 
This is a problem with versions of BSD tar that preserve permissions.  However,
it is not unique to FreeBSD.  Even if we were to chmod the directory
post-extract, we would still be vulnerable to a small window where files could
be replaced.  Since the issues is with the permissions in the dist tarball,
this needs to be raised with the libiconv authors.

http://www.freebsd.org/cgi/query-pr.cgi?pr=111528