Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debian packages are not created with root privileges #513

Open
muhdiboy opened this issue Mar 5, 2022 · 1 comment
Open

Debian packages are not created with root privileges #513

muhdiboy opened this issue Mar 5, 2022 · 1 comment

Comments

@muhdiboy
Copy link

muhdiboy commented Mar 5, 2022

Description
The debian packages aren't built with root:root privileges. So by installing them with dpkg (or equivalent) the files are extracted and the UID and GID are set to 1001:123, which can be literally anything on the system.

To Reproduce

  • download any .deb installer package
  • install (e.g. dpkg -i syncplay_1.6.9.deb)
  • check file permissions with ls -l /usr/lib/syncplay or ls -l /usr/lib/syncplay-server

Expected behavior
Root ownership of the extracted files

Version and platform:

  • OS: Pop!_OS 21.10
  • Syncplay version and build type: 1.6.9

Additional context
The files seem to be created with runner:docker privileges.

Solution recommendation
The .deb packages could be built with fakeroot, where it is possible to easily set UID and GID to 0:0, which is always the systems root, and build the .deb package.
I've extracted and rebuilt the package with correct permissions and installed it successfully on my system. It's working without issues.

@muhdiboy
Copy link
Author

muhdiboy commented Mar 6, 2023

Just adding another way to check privileges of installer package:
dpkg-deb --contents syncplay_1.7.0_Beta1.deb

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants