MIME-Version: 1.0
Date: Tue, 21 Jun 2022 10:43:37 +0200
From: Markus Kolb <alpinelinux+develml@tower-net.de>
To: Jakub Jirutka <jakub@jirutka.cz>
Cc: Konstantin Kulikov <k.kulikov2@gmail.com>, Alpine Linux devel ML
 <~alpine/devel@lists.alpinelinux.org>
Subject: Re: Security problem in how you manage users in package installations
In-Reply-To: <0ac71bc3-3b4b-a709-96b9-83f40c0c57ab@jirutka.cz>
References: <22948c2fba2f4882ac4646501fd6ef3f@tower-net.de>
 <CAD+eXGR0gJH5UbrgE=5qvXaNgsRD+17tueooGdSY1NKPLcVrKw@mail.gmail.com>
 <49d7456930f237457bf7f3f5c50f96e4@tower-net.de>
 <CAD+eXGQuATq8yW=LqSoyj04B=-egzfna_R6+9mOXXiiu+owq_A@mail.gmail.com>
 <0ac71bc3-3b4b-a709-96b9-83f40c0c57ab@jirutka.cz>
Message-ID: <410fabb4f80a07b9dc91fd67494c23a1@tower-net.de>
Content-Type: text/plain; charset=US-ASCII;
 format=flowed
Content-Transfer-Encoding: 7bit

Am 19.06.2022 18:54, schrieb Jakub Jirutka:
> Hi,
> 
>> I don't agree that admin should be required to manually create 
>> directories with correct permissions.
> 
> Me neither.
> 

Never requested anything like this...

But rc-scripts shouldn't overwrite permissions in an unsafe manner, and 
this can only be achieved if they don't modify clandestinely 
permissions.
The directories have to be created with correctly set permissions during 
package installation.
You can inform the admin during startup that there is something wrong, 
and the service can not start because of this, which is also expressed 
by the function name "check...". It doesn't say fix, modify, repair or 
anything else explaining that this is a mutable process.