>Number:         25779
>Category:       pkg
>Synopsis:       metamail permissions are wrong / linked binaries and man pages
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jun 01 17:07:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Igor Sobrado
>Release:        NetBSD 1.6.2
>Organization:
University of Oviedo
>Environment:
NetBSD altair.ciencias.uniovi.es 1.6.2 NetBSD 1.6.2 (GENERIC_LAPTOP) #0: Tue Feb 10 22:02:37 UTC 2004     autobuild@tgm.netbsd.org:/autobuild/netbsd-1-6-PATCH002/i386/OBJ/autobuild/netbsd-1-6-PATCH002/src/sys/arch/i386/compile/GENERIC_LAPTOP i386

>Description:
There are two small problems related with metamail.  The former is
that permissions for some files are wrong (e.g., the font files in
/usr/pkg/lib/metamail/fonts are writtable and EXECUTABLE, binaries
in /usr/pkg/bin are writtable).  At least, fonts and font related
files (e.g., fonts.alias, fonts.dir) should not be executable.

$ pwd
/usr/pkg/lib/metamail/fonts
$ ls -al
total 52
drwxr-xr-x  2 root  wheel    512 May 21 16:21 .
drwxr-xr-x  3 root  wheel    512 May 21 16:21 ..
-rwxr-xr-x  1 root  wheel    308 Mar 10 17:03 fonts.alias
-rw-r--r--  1 root  wheel    215 Mar 10 17:03 fonts.dir
-rwxr-xr-x  1 root  wheel  16408 Mar 10 17:03 heb6x13.pcf
-rwxr-xr-x  1 root  wheel  14936 Mar 10 17:03 heb8x13.pcf
-rwxr-xr-x  1 root  wheel  15892 Mar 10 17:03 heb8x13B.pcf

but MOST packages and all OS binaries remove write permissions too.
The latter is that there are some files that SHOULD BE links to the
same file:

$ cd /usr/pkg/bin
$ ls -li mimencode mmencode
49153 -rwxr-xr-x  1 root  wheel  10364 Mar 10 17:03 mimencode
49154 -rwxr-xr-x  1 root  wheel  10364 Mar 10 17:03 mmencode
$ md5 mimencode mmencode
MD5 (mimencode) = c3164a82da5278b7ef60ae94817a3d7e
MD5 (mmencode) = c3164a82da5278b7ef60ae94817a3d7e

(both files should have the same i-node number).  The man pages
for those commands should be linked to the same file too.

>How-To-Repeat:
Those problems can be reproduced looking at permissions and i-node
numbers on the files once installed.

>Fix:
Not known for me, sorry.

>Release-Note:
>Audit-Trail:
>Unformatted: