Bug#327389: marked as done (java-package: traversal permissions leading to libjavaplugin_oji.so are too restrictive - fix details included)

Debian Bug Tracking System owner at bugs.debian.org
Fri Sep 9 19:48:05 UTC 2005


Your message dated Fri, 09 Sep 2005 15:43:24 -0400
with message-id <4321E5DC.7030503 at bytemason.org>
and subject line Bug#327389: java-package: traversal permissions leading to	libjavaplugin_oji.so are too restrictive - fix details included
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 9 Sep 2005 19:12:27 +0000
>From cvgscote at hotmail.com Fri Sep 09 12:12:26 2005
Return-path: <cvgscote at hotmail.com>
Received: from ceres.aros.net [66.219.192.21] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EDoIU-0000jT-00; Fri, 09 Sep 2005 12:12:26 -0700
Received: from localhost.localdomain (firebat.aros.net [66.219.192.36])
	by ceres.aros.net (8.13.3/8.13.3) with ESMTP id j89JCQCf050847;
	Fri, 9 Sep 2005 13:12:26 -0600 (MDT)
	(envelope-from cvgscote at hotmail.com)
Message-Id: <200509091912.j89JCQCf050847 at ceres.aros.net>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Scott Edwards <cvgscote at hotmail.com>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: java-package: traversal permissions leading to libjavaplugin_oji.so are too
 restrictive - fix details included
X-Mailer: reportbug 3.17
Date: Fri, 09 Sep 2005 13:16:08 -0600
X-Virus-Scanned: ClamAV version 0.86.2, clamav-milter version 0.86 on ceres.aros.net
X-Virus-Status: Clean
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-7.5 required=4.0 tests=BAYES_00,FORGED_HOTMAIL_RCVD,
	HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: java-package
Version: 0.25
Severity: important

factiods gleaned from the dpkg bot on freenode regarding this topic:
http://supaplex.aros.net/freenode-dpkg-2005-09-09.txt
The system wide approach didn't seem to work.  I tried that after I got
my local copy working.  I yanked the symlink, restarted FF and tested,
and no java plugin.

supaplex at brattboy:~$ cd .mozilla/
supaplex at brattboy:~/.mozilla$ ls
appreg  firefox
supaplex at brattboy:~/.mozilla$ mkdir plugins
supaplex at brattboy:~/.mozilla$ cd plugins/
supaplex at brattboy:~/.mozilla/plugins$ ln -s
/usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ ls -l
total 0
lrwxrwxrwx  1 supaplex supaplex 53 Sep  9 12:18 libjavaplugin_oji.so ->
/usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so

new symlink reports it's bad somehow (in red)

supaplex at brattboy:~/.mozilla/plugins$ rm libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ ls -la /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
lrwxrwxrwx  1 root root 60 Aug 11  2004 /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so -> /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ ls -la /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
ls: /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so: Permission denied
supaplex at brattboy:~/.mozilla/plugins$ sudo ls -la /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
-rw-r--r--  1 brattboy brattboy 213660 Dec 16  2003 /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/i386/mozilla/
stat: cannot stat `/usr/java/j2re1.4.2/plugin/i386/mozilla/': Permission denied
supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/i386/
stat: cannot stat `/usr/java/j2re1.4.2/plugin/i386/': Permission denied
supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/
stat: cannot stat `/usr/java/j2re1.4.2/plugin/': Permission denied
supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/
  File: `/usr/java/j2re1.4.2/'
  Size: 4096            Blocks: 8          IO Block: 4096   directory
Device: 301h/769d       Inode: 4538562     Links: 7
Access: (0750/drwxr-x---)  Uid: ( 1000/brattboy)   Gid: ( 1000/brattboy)
Access: 2004-08-11 07:37:16.000000000 -0600
Modify: 2003-12-16 23:12:44.000000000 -0700
Change: 2004-08-11 07:36:36.000000000 -0600
supaplex at brattboy:~/.mozilla/plugins$ sudo chmod 755
/usr/java/j2re1.4.2/ /usr/java/j2re1.4.2/plugin/
/usr/java/j2re1.4.2/plugin/i386/
/usr/java/j2re1.4.2/plugin/i386/mozilla/
supaplex at brattboy:~/.mozilla/plugins$ ls -la
/usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
-rw-r--r--  1 brattboy brattboy 213660 Dec 16  2003
/usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ ls -la
total 8
drwxr-xr-x  2 supaplex supaplex 4096 Sep  9 12:18 .
drwxr-xr-x  4 supaplex supaplex 4096 Sep  9 12:18 ..
supaplex at brattboy:~/.mozilla/plugins$ ln -s /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
supaplex at brattboy:~/.mozilla/plugins$ ls -l
total 8
lrwxrwxrwx  1 supaplex supaplex   53 Sep  9 12:19 libjavaplugin_oji.so -> /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so

Restarting FireFox here, and testing a java game works as expected.

-rw-r--r--   1 supaplex supaplex 14411078 Sep  9 11:43 j2re-1_4_2_09-linux-i586.bin
-rw-r--r--   1 supaplex supaplex 20963512 Sep  9 11:48 sun-j2re1.4_1.4.2+09_i386.deb
supaplex at brattboy:~$ md5sum j2re-1_4_2_09-linux-i586.bin
f82a38b54315bf87dcfd2efcb5091984  j2re-1_4_2_09-linux-i586.bin

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.26-1-386
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages java-package depends on:
ii  coreutils                     5.2.1-2    The GNU core utilities
ii  debhelper                     4.9.5      helper programs for debian/rules
ii  fakeroot                      1.4.3      Gives a fake root environment

java-package recommends no packages.

-- no debconf information

---------------------------------------
Received: (at 327389-done) by bugs.debian.org; 9 Sep 2005 19:43:43 +0000
>From barry at bytemason.org Fri Sep 09 12:43:43 2005
Return-path: <barry at bytemason.org>
Received: from pollock.hmdnsgroup.com [63.247.129.26] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EDoml-0000CW-00; Fri, 09 Sep 2005 12:43:43 -0700
Received: from m677b36d0.tmodns.net ([208.54.123.103])
	by pollock.hmdnsgroup.com with esmtpa (Exim 4.52)
	id 1EDomd-0004nk-Um
	for 327389-done at bugs.debian.org; Fri, 09 Sep 2005 15:43:41 -0400
Message-ID: <4321E5DC.7030503 at bytemason.org>
Date: Fri, 09 Sep 2005 15:43:24 -0400
From: Barry Hawkins <barry at bytemason.org>
User-Agent: Debian Thunderbird 1.0.6 (X11/20050802)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: 327389-done at bugs.debian.org
Subject: Re: Bug#327389: java-package: traversal permissions leading to	libjavaplugin_oji.so
 are too restrictive - fix details included
References: <200509091912.j89JCQCf050847 at ceres.aros.net>
In-Reply-To: <200509091912.j89JCQCf050847 at ceres.aros.net>
X-Enigmail-Version: 0.92.0.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-HMDNSGroup-MailScanner-Information: Please contact the ISP for more information
X-HMDNSGroup-MailScanner: Found to be clean
X-MailScanner-From: barry at bytemason.org
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - pollock.hmdnsgroup.com
X-AntiAbuse: Original Domain - bugs.debian.org
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain - bytemason.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Delivered-To: 327389-done at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Scott Edwards wrote:
> Package: java-package
> Version: 0.25
> Severity: important
> 
> factiods gleaned from the dpkg bot on freenode regarding this topic:
> http://supaplex.aros.net/freenode-dpkg-2005-09-09.txt
> The system wide approach didn't seem to work.  I tried that after I got
> my local copy working.  I yanked the symlink, restarted FF and tested,
> and no java plugin.
> 
> supaplex at brattboy:~$ cd .mozilla/
> supaplex at brattboy:~/.mozilla$ ls
> appreg  firefox
> supaplex at brattboy:~/.mozilla$ mkdir plugins
> supaplex at brattboy:~/.mozilla$ cd plugins/
> supaplex at brattboy:~/.mozilla/plugins$ ln -s
> /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
> supaplex at brattboy:~/.mozilla/plugins$ ls -l
> total 0
> lrwxrwxrwx  1 supaplex supaplex 53 Sep  9 12:18 libjavaplugin_oji.so ->
> /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
> 
> new symlink reports it's bad somehow (in red)
> 
> supaplex at brattboy:~/.mozilla/plugins$ rm libjavaplugin_oji.so
> supaplex at brattboy:~/.mozilla/plugins$ ls -la /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so
> lrwxrwxrwx  1 root root 60 Aug 11  2004 /usr/lib/mozilla-firefox/plugins/libjavaplugin_oji.so -> /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
> supaplex at brattboy:~/.mozilla/plugins$ ls -la /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
> ls: /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so: Permission denied
> supaplex at brattboy:~/.mozilla/plugins$ sudo ls -la /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
> -rw-r--r--  1 brattboy brattboy 213660 Dec 16  2003 /usr/java/j2re1.4.2/plugin/i386/mozilla/libjavaplugin_oji.so
> supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/i386/mozilla/
> stat: cannot stat `/usr/java/j2re1.4.2/plugin/i386/mozilla/': Permission denied
> supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/i386/
> stat: cannot stat `/usr/java/j2re1.4.2/plugin/i386/': Permission denied
> supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/plugin/
> stat: cannot stat `/usr/java/j2re1.4.2/plugin/': Permission denied
> supaplex at brattboy:~/.mozilla/plugins$ stat /usr/java/j2re1.4.2/
[...]
Scott,
    Thank you for your use of Debian.  You have filed a bug against
java-package when trying to use a JRE that is not packaged by
java-package.  The thing you are trying to do is outside the scope of
java-package.  Please try installing java-package and generating a
Debian package from a Sun, Blackdown, or IBM binary that you download as
directed in the package's documentation.

Regards,
- --
Barry Hawkins
site: www.bytemason.org
weblog: www.yepthatsme.com

Registered Linux User #368650
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD4DBQFDIeXcHuKcDICy0QoRAqZJAKCYZ4RGxrCabJtAzHzdIJlsEeycXACWMpyX
8DG2Gdgfkydt7zGYw/bUfQ==
=Po8p
-----END PGP SIGNATURE-----



More information about the pkg-java-maintainers mailing list