some third party libraries do not respect the directorypermissions config setting

Bug #1037365 reported by Hugh Davenport
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Confirmed
Low
Unassigned

Bug Description

one example is htmlpurifier, from a git grep mkdir, i see that pear, dwoo, adobdb, and flowplayer may also be culprits

Also, the internal examples
- extract function in artefact/file.lib.php
- copyr function in lib/file.php
- there is one instance in lib/db/upgrade.php

Tags: refactoring
Changed in mahara:
milestone: 1.6.0 → 1.7.0
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 1.7.0 → 1.8.0
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 1.8rc1 → 1.8.0
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 1.8.0 → 1.8.1
Revision history for this message
Aaron Wells (u-aaronw) wrote :

The examples that Hugh mentions in internal Mahara code were all patched as part of Bug 1057238. But there are still some mkdir's in these /lib subdirectories:

adodb
csstidy
dwoo
htmlpurifier
pear

Changed in mahara:
milestone: 1.8.1 → 1.8.2
Aaron Wells (u-aaronw)
no longer affects: mahara/1.6
no longer affects: mahara/1.7
no longer affects: mahara/1.8
no longer affects: mahara/1.9
Aaron Wells (u-aaronw)
information type: Public → Public Security
Changed in mahara:
milestone: 1.10.0 → 1.11.0
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 15.04.0 → 15.04.1
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 15.04.1 → 15.10.0
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 15.10.0 → 16.04.0
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 16.04.0 → 16.10.0
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 16.10.0 → 16.10.1
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 16.10.1 → 17.04.0
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 17.04.0 → 17.10.0
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 17.10.0 → 18.04.0
Robert Lyon (robertl-9)
Changed in mahara:
milestone: 18.04.0 → 18.10.0
Changed in mahara:
milestone: 18.10.0 → none
tags: added: code-cleanup
Lisa Seeto (lisaseeto)
tags: added: refactoring
removed: code-cleanup
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.