[Pkg-utopia-maintainers] Bug#910558: Insufficient privileges on trustedkeys.gpg

[martin f krafft]

Package: flatpak
Version: 1.0.3-1
Severity: minor

While running

  # flatpak -vv remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo

the file /var/lib/flatpak/repo/flathub.trustedkeys.gpg was created
with permissions 0640, which means that regular users weren't able
to interact with flatpak until I added o+r.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages flatpak depends on:
ii  bubblewrap             0.3.1-2
ii  libappstream-glib8     0.7.12-1
ii  libarchive13           3.2.2-5
ii  libc6                  2.27-6
ii  libglib2.0-0           2.58.1-2
ii  libgpgme11             1.11.1-1
ii  libjson-glib-1.0-0     1.4.2-4
ii  libostree-1-1          2018.8-2
ii  libpolkit-gobject-1-0  0.105-21
ii  libseccomp2            2.3.3-3
ii  libsoup2.4-1           2.64.1-1
ii  libxau6                1:1.0.8-1+b2
ii  libxml2                2.9.4+dfsg1-7+b1
ii  xdg-desktop-portal     1.0.2-1

Versions of packages flatpak recommends:
ii  desktop-file-utils                                   0.23-3
ii  gtk-update-icon-cache                                3.24.1-2
ii  hicolor-icon-theme                                   0.17-2
ii  libpam-systemd                                       239-10
ii  p11-kit                                              0.23.14-2
ii  policykit-1                                          0.105-21
ii  shared-mime-info                                     1.10-1
pn  xdg-desktop-portal-gtk | xdg-desktop-portal-backend  <none>

Versions of packages flatpak suggests:
pn  avahi-daemon  <none>

-- no debconf information


-- 
 .''`.   martin f. krafft <madduck at d.o> @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1118 bytes
Desc: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20181008/2fde6962/attachment.sig>