[Bug 917845] Re: apt-ftparchive sets permission of Packages file to 001 to

[Evan Broder]

I've just uploaded this fix to lucid-proposed. Somebody from the SRU
team should review it shortly.

** Description changed:

  [Impact]
- <fill me in with explanation of severity and frequency of bug on users and justification for backporting the fix to the stable release>
+ When using apt-ftparchive with a config file, BinDirectory blocks don't inherit the default file permissions, causing them to end up with a permission of 0001
  
  [Development Fix]
- <fill me in with an explanation of how the bug has been addressed in the development branch, including the relevant version numbers of packages modified in order to implement the fix. >
+ Fixed upstream in http://anonscm.debian.org/loggerhead/apt/debian-sid/revision/2013 ; incorporated into releases after Lucid.
  
  [Stable Fix]
- <fill me in by pointing out a minimal patch applicable to the stable version of the package.>
+ Cherry-picked the upstream patch - http://bazaar.launchpad.net/~l3on/ubuntu/lucid/apt/fix-917845/revision/107
  
  [Text Case]
- <fill me in with detailed *instructions* on how to reproduce the bug.  This will be used by people later on to verify the updated package fixes the problem.>
- 1.
- 2.
- 3.
- Broken Behavior: 
- Fixed Behavior: 
+ (lucid-amd64)root at caron:~# mkdir -p apt/conf
+ (lucid-amd64)root at caron:~# mkdir -p apt/dists/sid/{main,contrib,non-free}/{binary-i386,source}
+ (lucid-amd64)root at caron:~# mkdir -p apt/pool/{main,contrib,non-free}
+ (lucid-amd64)root at caron:~# cd apt/
+ (lucid-amd64)root at caron:~/apt# cp /usr/share/doc/apt-utils/examples/apt-ftparchive.conf conf/
+ (lucid-amd64)root at caron:~/apt# apt-ftparchive generate conf/apt-ftparchive.conf
+ [...]
+ (lucid-amd64)root at caron:~/apt# ls -l dists/sid/main/binary-i386/Packages
+ 
+ Broken result: ---------x 1 root root 0 Feb 29 09:37 dists/sid/main/binary-i386/Packages
+ Fixed result:  -rw-r--r-- 1 root root 0 Feb 29 11:11 dists/sid/main/binary-i386/Packages
  
  [Regression Potential]
- <fill me in with a discussion of likelihood and potential severity of regressions and how users could get inadvertently affected. 
+ Patch is isolated, straightforward, and contained within the apt-ftparchive tool.
  
  [Original Report]
  This is the same as Debian Bug#595922 and was introduced in 0.7.25.3ubuntu9.9. It was not present in 0.7.25.3ubuntu9.7.
  
  apt-ftparchive changes permissions on the Packages files to 001:
  
  strace -F -e chmod /usr/bin/apt-ftparchive generate conf/apt-
  ftparchive.conf
  
  chmod("./dists/lucid/main/binary-amd64/Packages.bz2", 01) = 0
  chmod("./dists/lucid/main/binary-amd64/Packages.gz", 01) = 0
  chmod("./dists/lucid/main/binary-amd64/Packages", 01) = 0
  
  E: Could not open file ./dists/lucid/main/binary-amd64/Packages - open (13: Permission denied)
  E: Error processing contents dists/lucid/Contents-amd64

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/917845

Title:
  apt-ftparchive sets permission of Packages file to 001 to

Status in “apt” package in Ubuntu:
  New
Status in “apt” package in Debian:
  Fix Released

Bug description:
  [Impact]
  When using apt-ftparchive with a config file, BinDirectory blocks don't inherit the default file permissions, causing them to end up with a permission of 0001

  [Development Fix]
  Fixed upstream in http://anonscm.debian.org/loggerhead/apt/debian-sid/revision/2013 ; incorporated into releases after Lucid.

  [Stable Fix]
  Cherry-picked the upstream patch - http://bazaar.launchpad.net/~l3on/ubuntu/lucid/apt/fix-917845/revision/107

  [Text Case]
  (lucid-amd64)root at caron:~# mkdir -p apt/conf
  (lucid-amd64)root at caron:~# mkdir -p apt/dists/sid/{main,contrib,non-free}/{binary-i386,source}
  (lucid-amd64)root at caron:~# mkdir -p apt/pool/{main,contrib,non-free}
  (lucid-amd64)root at caron:~# cd apt/
  (lucid-amd64)root at caron:~/apt# cp /usr/share/doc/apt-utils/examples/apt-ftparchive.conf conf/
  (lucid-amd64)root at caron:~/apt# apt-ftparchive generate conf/apt-ftparchive.conf
  [...]
  (lucid-amd64)root at caron:~/apt# ls -l dists/sid/main/binary-i386/Packages

  Broken result: ---------x 1 root root 0 Feb 29 09:37 dists/sid/main/binary-i386/Packages
  Fixed result:  -rw-r--r-- 1 root root 0 Feb 29 11:11 dists/sid/main/binary-i386/Packages

  [Regression Potential]
  Patch is isolated, straightforward, and contained within the apt-ftparchive tool.

  [Original Report]
  This is the same as Debian Bug#595922 and was introduced in 0.7.25.3ubuntu9.9. It was not present in 0.7.25.3ubuntu9.7.

  apt-ftparchive changes permissions on the Packages files to 001:

  strace -F -e chmod /usr/bin/apt-ftparchive generate conf/apt-
  ftparchive.conf

  chmod("./dists/lucid/main/binary-amd64/Packages.bz2", 01) = 0
  chmod("./dists/lucid/main/binary-amd64/Packages.gz", 01) = 0
  chmod("./dists/lucid/main/binary-amd64/Packages", 01) = 0

  E: Could not open file ./dists/lucid/main/binary-amd64/Packages - open (13: Permission denied)
  E: Error processing contents dists/lucid/Contents-amd64

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/917845/+subscriptions