Uploaded image for project: 'Qt Installer Framework'
  1. Qt Installer Framework
  2. QTIFW-1412

Wrong (and insecure) permissions for directories and files using the online installer

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P2: Important
    • Resolution: Done
    • Affects Version/s: 3.1.1
    • Fix Version/s: 3.2.0 (3.2 branch)
    • Component/s: General
    • Labels:
      None
    • Platform/s:
      Linux/X11, macOS

      Description

      I've just installed a clean 5.5.1 on Linux 64bit using the online installer.

      The installation directories were set by the installer with 777 permissions:

      $ ls -l w
      drwxrwxrwx 3 peppe peppe 4096 ott 15 18:29 projects
      
      $ ls -l w/projects/
      drwxrwxrwx 7 peppe peppe 4096 ott 15 18:37 qt-binary
      

      Also the files have wrong / suspicious permissions, some of these for instance are world writeable:

      $ ls -l w/projects/qt-binary/
      drwxrwxr-x 4 peppe peppe     4096 ott 15 18:36 5.5
      -rw-rw-rw- 1 peppe peppe     8637 ott 15 18:36 components.xml
      drwxrwxr-x 3 peppe peppe     4096 ott 15 18:36 Docs
      drwxrwxr-x 3 peppe peppe     4096 ott 15 18:36 Examples
      -rw-rw-rw- 1 peppe peppe   156691 ott 15 18:37 InstallationLog.txt
      drwxr-xr-x 2 peppe peppe     4096 ott 15 18:36 Licenses
      -rwxr-xr-x 1 peppe peppe 29905540 ott 15 18:36 MaintenanceTool
      -rw-rw-rw- 1 peppe peppe 24153430 ott 15 18:37 MaintenanceTool.dat
      -rw-r--r-- 1 peppe peppe    16933 ott 15 18:37 MaintenanceTool.ini
      -rw-rw-rw- 1 peppe peppe      362 ott 15 18:37 network.xml
      drwxrwxr-x 3 peppe peppe     4096 ott 15 18:36 Tools
      -rw-r--r-- 1 peppe peppe    18036 ago 14 09:45 update.rcc
      
      peppe@sulaco:~$  ls -l w/projects/qt-binary/5.5/gcc_64/bin/
      -rwxr-xr-x 1 peppe peppe 1136272 ott 13 10:14 assistant
      -rwxr-xr-x 1 peppe peppe  431696 ott 13 10:14 designer
      -rwxrwxr-x 1 peppe peppe    6004 ott 13 00:45 fixqt4headers.pl
      -rwxr-xr-x 1 peppe peppe  273832 ott 13 10:14 lconvert
      -rwxr-xr-x 1 peppe peppe   57424 ott 13 00:08 licheck64
      -rwxr-xr-x 1 peppe peppe 1381280 ott 13 10:14 linguist
      

      I would expect that after an "ordinary" install to get

      • 755 on directories
      • 644 on files
      • 755 on executables

        Attachments

        For Gerrit Dashboard: QTIFW-1412
        # Subject Branch Project Status CR V

          Activity

            People

            • Assignee:
              arttu.tarkiainen Arttu Tarkiainen
              Reporter:
              peppe Giuseppe D'Angelo
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Gerrit Reviews

                There are no open Gerrit changes