[Pkg-ROX-devel] Bug#286162: marked as done (rox-filer: menu-method try to write to /usr and /etc)

Debian Bug Tracking System owner@bugs.debian.org
Sun, 30 Jan 2005 03:33:18 -0800


Your message dated Sun, 30 Jan 2005 06:17:10 -0500
with message-id <E1CvD4o-0003Zm-00@newraff.debian.org>
and subject line Bug#286162: fixed in rox 2.2.0-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Dec 2004 00:18:17 +0000
>From allomber@math.u-bordeaux.fr Fri Dec 17 16:18:17 2004
Return-path: <allomber@math.u-bordeaux.fr>
Received: from lns-vlq-7-lil-82-254-200-103.adsl.proxad.net (yellowpig.yi.org) [82.254.200.103] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CfSIa-0001yS-00; Fri, 17 Dec 2004 16:18:16 -0800
Received: from seventeen
	([127.0.0.1] helo=yellowpig.yi.org ident=mail)
	by yellowpig.yi.org with smtp (Exim 3.35 #1 (Debian))
	id 1CfSIY-0003xH-00; Sat, 18 Dec 2004 01:18:14 +0100
Received: (nullmailer pid 15205 invoked by uid 1000);
	Sat, 18 Dec 2004 00:18:12 -0000
Date: Sat, 18 Dec 2004 01:18:11 +0100
From: Bill Allombert <ballombe@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: rox-filer: menu-method try to write to /usr and /etc
Message-ID: <20041218001811.GA15014@yellowpig.yi.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Reportbug-Version: 3.4
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: rox-filer
Version: 2.0.1-3
Severity: serious
Justification: FHS violation.

Hello ROX-in-Debian developers,

The file /etc/menu-methods/rox-filer do several things but in
particular:

postrun="mkdir -p /usr/share/apps/Debian ; rm -r /usr/share/apps/Debian ; " \
        ". /etc/roxmenu ; rm /etc/roxmenu"

This cause the following problems:
1) The FHS does not allow programs to modify /usr
2) /usr can be mounted read-only at the time update-menus is run so this
can fail.
3) You should use && insteads of ; to be sure the execution stop if one
of the command fail.
4) Creating temporary files in /etc is inappropriate. 
5) /usr/share/apps/ is not private to ROX so this menu-method might be
in conflicts with others.

What you should do instead is to add an empty directory
/var/lib/rox-filer/Debian to the .deb, and change the menu-methods to:
1) create the script as /var/lib/rox-filer/roxmenu
2) create the menu in /var/lib/rox-filer/Debian
and change rox-filer to read /var/lib/rox-filer/Debian. Maybe just
add a symlink /usr/share/apps/Debian --> /var/lib/rox-filer/Debian,
though that does not address point 5) but maybe no other packages use
/usr/share/apps/ anymore.

Cheers,
-- 
Bill. <ballombe@debian.org>

Imagine a large red swirl here. 

---------------------------------------
Received: (at 286162-close) by bugs.debian.org; 30 Jan 2005 11:23:02 +0000
>From katie@ftp-master.debian.org Sun Jan 30 03:23:02 2005
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CvDAT-0006Qz-00; Sun, 30 Jan 2005 03:23:02 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1CvD4o-0003Zm-00; Sun, 30 Jan 2005 06:17:10 -0500
From: Francesco Paolo Lovergine <frankie@debian.org>
To: 286162-close@bugs.debian.org
X-Katie: $Revision: 1.55 $
Subject: Bug#286162: fixed in rox 2.2.0-1
Message-Id: <E1CvD4o-0003Zm-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Sun, 30 Jan 2005 06:17:10 -0500
Delivered-To: 286162-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 3

Source: rox
Source-Version: 2.2.0-1

We believe that the bug you reported is fixed in the latest version of
rox, which is due to be installed in the Debian FTP archive:

rox-filer_2.2.0-1_i386.deb
  to pool/main/r/rox/rox-filer_2.2.0-1_i386.deb
rox_2.2.0-1.diff.gz
  to pool/main/r/rox/rox_2.2.0-1.diff.gz
rox_2.2.0-1.dsc
  to pool/main/r/rox/rox_2.2.0-1.dsc
rox_2.2.0.orig.tar.gz
  to pool/main/r/rox/rox_2.2.0.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 286162@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Francesco Paolo Lovergine <frankie@debian.org> (supplier of updated rox package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 30 Jan 2005 11:59:27 +0100
Source: rox
Binary: rox-filer
Architecture: source i386
Version: 2.2.0-1
Distribution: unstable
Urgency: low
Maintainer: The ROX-in-Debian Project Team <pkg-rox-devel@lists.alioth.debian.org>
Changed-By: Francesco Paolo Lovergine <frankie@debian.org>
Description: 
 rox-filer  - A simple graphical file manager for X11
Closes: 273072 274007 286162 289314
Changes: 
 rox (2.2.0-1) unstable; urgency=low
 .
   * New upstream release
     (closes: #273072)
   * Disabled current menu method to avoid breaking FHS. It needs a better knowledge of rox-filer inners.
     Maybe I'll re-introduce that later, if truly useful.
     Also added menu to suggested packages in control.
     (closes: #286162)
   * Removed additional debian images and sharutils dependency.
   * Rules file revised to meet current building system and files.
   * rox-filer binary renamed rox, the same for all other rox-filer refs.
     Leaving rox-filer symlink anyway.
     (closes: #274007)
   * Added mimeapps.dpatch and dnd.patch to manage mime apps for text and text-html a la debian way.
     (closes: #289314)
Files: 
 b3ed0610eabea7e02a9e0e8a0b13faac 1018 x11 optional rox_2.2.0-1.dsc
 0deefd9e7edd4e79cd0f18f423264ebb 2033724 x11 optional rox_2.2.0.orig.tar.gz
 1aaba6e45d71b84d523a37212403da63 9539 x11 optional rox_2.2.0-1.diff.gz
 3b82bcb8cc321ae852e5fce45093923d 1203244 x11 optional rox-filer_2.2.0-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB/L/VpFNRmenyx0cRAkIvAKDzueRyijWqrVOSnAEiJ4QI588dxwCg67Lb
tLRjRom6C8hzbzKobA7TeK4=
=amYz
-----END PGP SIGNATURE-----