[Pkg-kde-extras] Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

[Sune Vuorela]

On Sunday 07 January 2007 09:00, Ana Guerrero wrote:
> Thanks for the info. I just found out this option is offered in the Control
> Center if you have installed kde-guidance, so i'm reasssigning the bug to
> this package.

I have looked into this bug quickly.

It seems to be the following:

kde-guidance creates a temporary file (with whatever umask is set to, in 
larrys case to 077) so the temporary file is with 0600 permissions.
Then kde-guidance looks at group and owner of /etc/passwd and sets the same 
group and owner on the temporary file - and finally moves the temporary file 
over to /etc/passwd.

I am not very good at python, so my analyzis might be wrong.
At least I tried the following patch which absolutely didn't work (it didn't 
do any harm either)

--- kde-guidance-0.7.0.orig/userconfig/unixauthdb.py
+++ kde-guidance-0.7.0/userconfig/unixauthdb.py
@@ -828,6 +828,7 @@
             #print u._getPasswdEntry()
         os.close(fd)
         os.chown(tmpname, origstat.st_uid, origstat.st_gid)
+       os.chmod(tmpname, origstat.s_imode)

         # Update the passwd file
         passwordlock = os.open(self.__passwordfile, os.O_WRONLY) # FIXME 
encoding

(I guess it is my python syntax that is wrong, but someone with better python 
might be able to correct it)

/Sune


-- 
Man, do you know how can I overclock the monitor on the cable on a ATI 
attachment?

First from Outlook Express 99 or from the drawer within Office you neither can 
ever install a coaxial ISDN forward, nor can ever rename the file, this way 
from Flash 97 you never have to send to the prompt to open the analogic 
processor of the RW gadget on the TCP button to a virus.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20070107/e9425460/attachment.pgp