[Debian-med-packaging] Bug#825119: jmodeltest: creates world writable /var/log/jmodeltest

Andreas Beckmann anbe at debian.org
Tue May 24 23:00:24 UTC 2016


On 2016-05-24 21:32, Andreas Tille wrote:
>> Perhaps you want 1777?
> 
> Would you consider this a fix for the bug?

That will at least silence piuparts (a world writable directory with
sticky bit is accepted).

I leave it to you whether you want to escalate the "insecure tempfile
creation" as a security bug.


Andreas



More information about the Debian-med-packaging mailing list