-
-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Description
Describe the Bug
The Debian package (since at least 2023!) has shipped the file
/usr/local/webots/projects/robots/gctronic/e-puck/transfer/xc16/lib/dsPIC30F/libp30F6014A-elf.a
with root:root
ownership but -rw-rw-rw-
permissions. This is presumably unintentional and obviously undesirable from a system security / integrity point of view; files installed by dpkg are not normally expected to be editable except by root.
with root:root
ownership but -rw-rw-rw-
permissions. This is presumably unintentional and obviously undesirable from a system security / integrity point of view; files installed by dpkg are not normally expected to be editable except by root.
Steps to Reproduce
.
- Install
webots_2025a_amd64.deb
ls -l /usr/local/webots/projects/robots/gctronic/e-puck/transfer/xc16/lib/dsPIC30F/libp30F6014A-elf.a
- observe it is editable by world.
Expected behavior
I'd expect to see -rw-r--r--
permissions like similar packaged files.
System
- Operating System: Ubuntu 24.04 Noble, 22.04 Jammy