[Bug 1306271] [NEW] weird directory permissions

[Jamie Strandboge]

Public bug reported:

I was performing install audits and noticed the following directory permissions:
/var/lib/system-image                                    drwxrws--- root root
/var/lib/system-image/keyrings                   drwx--S--- root root
/var/log/system-image                                   drwxrws--- root root

The directories are all setgid, but the group is 'root' and the owner is 'root' so I don't understand the directory permissions. Shouldn't these simply be:
/var/lib/system-image                                    drwxr-x--- root root
/var/lib/system-image/keyrings                   drwx--x--- root root
/var/log/system-image                                   drwxr-x--- root root

This isn't security relevant, but I thought it worth bringing up.

** Affects: system-image (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to system-image in Ubuntu.
https://bugs.launchpad.net/bugs/1306271

Title:
  weird directory permissions

Status in “system-image” package in Ubuntu:
  New

Bug description:
  I was performing install audits and noticed the following directory permissions:
  /var/lib/system-image                                    drwxrws--- root root
  /var/lib/system-image/keyrings                   drwx--S--- root root
  /var/log/system-image                                   drwxrws--- root root

  The directories are all setgid, but the group is 'root' and the owner is 'root' so I don't understand the directory permissions. Shouldn't these simply be:
  /var/lib/system-image                                    drwxr-x--- root root
  /var/lib/system-image/keyrings                   drwx--x--- root root
  /var/log/system-image                                   drwxr-x--- root root

  This isn't security relevant, but I thought it worth bringing up.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/system-image/+bug/1306271/+subscriptions