diff -Nru hplip-3.17.10+repack0/debian/changelog hplip-3.17.10+repack0/debian/changelog --- hplip-3.17.10+repack0/debian/changelog 2018-03-07 02:18:22.000000000 -0600 +++ hplip-3.17.10+repack0/debian/changelog 2021-10-29 13:23:55.000000000 -0500 @@ -1,3 +1,9 @@ +hplip (3.17.10+repack0-6) bionic; urgency=medium + + * Restrict permissions on .hplip/.gnupg directory (LP: #1938442) + + -- William 'jawn-smith' Wilson Fri, 29 Oct 2021 13:23:55 -0500 + hplip (3.17.10+repack0-5) unstable; urgency=medium * Move 56-hpmud.rules from hplip to libsane-hpaio (Closes: #890930) diff -Nru hplip-3.17.10+repack0/debian/patches/0024-fix-permissions-on-gnupg-dir.patch hplip-3.17.10+repack0/debian/patches/0024-fix-permissions-on-gnupg-dir.patch --- hplip-3.17.10+repack0/debian/patches/0024-fix-permissions-on-gnupg-dir.patch 1969-12-31 18:00:00.000000000 -0600 +++ hplip-3.17.10+repack0/debian/patches/0024-fix-permissions-on-gnupg-dir.patch 2021-10-29 13:22:35.000000000 -0500 @@ -0,0 +1,21 @@ +Description: Change .gnupg directory permissions to 700 + The .hplip/.gnupg directory has permissions of 755. While + only public keys are stored in this directory, it can still + be seen as a privacy issue that the keys are readable by + any user. Changing the permissions to 700 fixes this issue +Author: zdohnal +Bug: https://bugs.launchpad.net/ubuntu/+source/hplip/+bug/1938442 +Last-Update: 2021-10-29 +--- +This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ +--- a/base/validation.py ++++ b/base/validation.py +@@ -55,7 +55,7 @@ + + if not os.path.exists(self.__gpg_dir): + try: +- os.mkdir(self.__gpg_dir, 0o755) ++ os.mkdir(self.__gpg_dir, 0o700) + except OSError: + log.error("Failed to create %s" % self.__gpg_dir) + self.__change_owner() diff -Nru hplip-3.17.10+repack0/debian/patches/series hplip-3.17.10+repack0/debian/patches/series --- hplip-3.17.10+repack0/debian/patches/series 2017-12-09 12:01:59.000000000 -0600 +++ hplip-3.17.10+repack0/debian/patches/series 2021-10-29 13:12:59.000000000 -0500 @@ -21,3 +21,4 @@ 0021-Add-include-cups-ppd.h-in-various-places-as-CUPS-2.2.patch 0022-Fix-list-wrapping-in-scan.py-to-fix-generated-manpag.patch 0023-Fix-handling-of-unicode-filenames-in-sixext.py.patch +0024-fix-permissions-on-gnupg-dir.patch