[Pbuilder-maint] Bug#420460: pbuilder: creates BUILDRESULT directory even in places where the user has no write permissions

[Andreas Beckmann]

Package: pbuilder
Version: 0.166
Severity: normal

Hi,

since the BUILDRESULT creation is done with root permissions, it can be
placed everyhere on the system.

Probably creation and use of the BUILDRESULT directory should be restricted
to places where the user invoking pbuilder/pdebuild has write permissions.

E.g.

NO --buildresult /etc	  (exists, but user has no write permissions)
NO --buildresult /etc/p/b/u/i/lderbuildresult   
      (does not exist, user has no create permission (no write perm. in /etc)
YES --buildresult /tmp    (write permission, even if not owned by the user)
YES --buildresult /tmp/p/b/u/i/lderbuildresult   (create permissions)

Andreas

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable'), (300, 'unstable'), (30, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-4-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages pbuilder depends on:
ii  cdebootstrap                  0.3.15     Bootstrap a Debian system
ii  coreutils                     5.97-5.3   The GNU core utilities
ii  debianutils                   2.18       Miscellaneous utilities specific t
ii  debootstrap                   0.3.3.3    Bootstrap a basic Debian system
ii  gcc                           4:4.1.1-15 The GNU C compiler
ii  wget                          1.10.2-2   retrieves files from the web

Versions of packages pbuilder recommends:
ii  cowdancer                     0.26       Copy-on-write directory tree utili
ii  devscripts                    2.10.2     Scripts to make the life of a Debi
ii  fakeroot                      1.6.5      Gives a fake root environment
ii  sudo                          1.6.8p12-5 Provide limited super user privile

-- no debconf information