From bbc2ea59142000debec86dc666675f9da6c29977 Mon Sep 17 00:00:00 2001 From: Michael Shuler Date: Thu, 20 Dec 2018 09:58:21 -0600 Subject: Fix permissions on /usr/local/share/ca-certificates Follow symlinks to stat the correct permissions and ownership - 916833 --- debian/ca-certificates.postinst | 8 ++++---- debian/changelog | 3 +++ 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/debian/ca-certificates.postinst b/debian/ca-certificates.postinst index 8db857c..68501cf 100644 --- a/debian/ca-certificates.postinst +++ b/debian/ca-certificates.postinst @@ -41,14 +41,14 @@ delca() { case "$1" in configure) if [ ! -e /usr/local/share/ca-certificates ]; then - if mkdir -m $(stat -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then - chgrp $(stat -c %g /usr/local) /usr/local/share/ca-certificates + if mkdir -m $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then + chgrp $(stat -L -c %g /usr/local) /usr/local/share/ca-certificates fi # Handle upgrades and allow local admin to override: # e.g. dpkg-statoverride --add root staff 2775 /usr/local/share/ca-certificates elif ! dpkg-statoverride --list /usr/local/share/ca-certificates >/dev/null; then - chmod $(stat -c %a /usr/local) /usr/local/share/ca-certificates || true - chown $(stat -c %u /usr/local):$(stat -c %g /usr/local) /usr/local/share/ca-certificates || true + chmod $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates || true + chown $(stat -L -c %u /usr/local):$(stat -L -c %g /usr/local) /usr/local/share/ca-certificates || true fi . /usr/share/debconf/confmodule diff --git a/debian/changelog b/debian/changelog index 2a6ed46..bec0b2d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,8 @@ ca-certificates (20181220) UNRELEASED; urgency=medium + * debian/ca-certificates.postinst: + Fix permissions on /usr/local/share/ca-certificates when using symlinks. + Closes: #916833 * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle to version 2.28. The following certificate authorities were added (+): -- cgit v1.2.1