diff options
| author | Michael Shuler <michael@pbandjelly.org> | 2018-12-20 09:58:21 -0600 |
|---|---|---|
| committer | Michael Shuler <michael@pbandjelly.org> | 2018-12-20 09:58:21 -0600 |
| commit | bbc2ea59142000debec86dc666675f9da6c29977 (patch) | |
| tree | 2015871366e25828a7b831abdbaec76391cbebb7 | |
| parent | 001fc6a65954bc460bc752a335b76b80fa5bcf36 (diff) | |
| download | ca-certificates-bbc2ea59142000debec86dc666675f9da6c29977.tar.gz | |
Fix permissions on /usr/local/share/ca-certificates
Follow symlinks to stat the correct permissions and ownership - 916833
| -rw-r--r-- | debian/ca-certificates.postinst | 8 | ||||
| -rw-r--r-- | debian/changelog | 3 |
2 files changed, 7 insertions, 4 deletions
diff --git a/debian/ca-certificates.postinst b/debian/ca-certificates.postinst index 8db857c..68501cf 100644 --- a/debian/ca-certificates.postinst +++ b/debian/ca-certificates.postinst @@ -41,14 +41,14 @@ delca() { case "$1" in configure) if [ ! -e /usr/local/share/ca-certificates ]; then - if mkdir -m $(stat -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then - chgrp $(stat -c %g /usr/local) /usr/local/share/ca-certificates + if mkdir -m $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then + chgrp $(stat -L -c %g /usr/local) /usr/local/share/ca-certificates fi # Handle upgrades and allow local admin to override: # e.g. dpkg-statoverride --add root staff 2775 /usr/local/share/ca-certificates elif ! dpkg-statoverride --list /usr/local/share/ca-certificates >/dev/null; then - chmod $(stat -c %a /usr/local) /usr/local/share/ca-certificates || true - chown $(stat -c %u /usr/local):$(stat -c %g /usr/local) /usr/local/share/ca-certificates || true + chmod $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates || true + chown $(stat -L -c %u /usr/local):$(stat -L -c %g /usr/local) /usr/local/share/ca-certificates || true fi . /usr/share/debconf/confmodule diff --git a/debian/changelog b/debian/changelog index 2a6ed46..bec0b2d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,8 @@ ca-certificates (20181220) UNRELEASED; urgency=medium + * debian/ca-certificates.postinst: + Fix permissions on /usr/local/share/ca-certificates when using symlinks. + Closes: #916833 * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle to version 2.28. The following certificate authorities were added (+): |