Wind River Support Network

HomeDefectsLIN6-8844
Fixed

LIN6-8844 : build directories are group and world writable.

Created: Nov 28, 2014    Updated: Dec 3, 2018
Resolved Date: Dec 2, 2014
Found In Version: 6.0.0.13
Fix Version: 6.0.0.15
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Build & Config

Description

When doing a build it was noticed that the packages-split directory had these permissions:

ls  -ld build/busybox/packages-split
drwxrwxrwx 14 rmacleod rmacleod 4096 Nov 28 11:49 build/busybox/packages-split

Clearly this is a security concern since anyone could change your package content.

Steps to Reproduce

configure ... --enable-board=qemuppc --enable-rootfs=glibc-core --enable-kernel=standard 

make
 ls  -ld build/busybox/packages-split

Other Downloads


Live chat
Online