diff -Nru hplip-3.21.2+dfsg1/debian/changelog hplip-3.21.2+dfsg1/debian/changelog --- hplip-3.21.2+dfsg1/debian/changelog 2021-03-05 07:20:56.000000000 -0600 +++ hplip-3.21.2+dfsg1/debian/changelog 2021-10-29 13:49:53.000000000 -0500 @@ -1,3 +1,9 @@ +hplip (3.21.2+dfsg1-2ubuntu1) hirsute; urgency=medium + + * Restrict permissions on .hplip/.gnupg directory (LP: #1938442) + + -- William 'jawn-smith' Wilson Fri, 29 Oct 2021 13:49:53 -0500 + hplip (3.21.2+dfsg1-2) unstable; urgency=medium [ Bernhard Übelacker ] diff -Nru hplip-3.21.2+dfsg1/debian/patches/0082-fix-permissions-on-gnupg-dir.patch hplip-3.21.2+dfsg1/debian/patches/0082-fix-permissions-on-gnupg-dir.patch --- hplip-3.21.2+dfsg1/debian/patches/0082-fix-permissions-on-gnupg-dir.patch 1969-12-31 18:00:00.000000000 -0600 +++ hplip-3.21.2+dfsg1/debian/patches/0082-fix-permissions-on-gnupg-dir.patch 2021-10-29 13:49:39.000000000 -0500 @@ -0,0 +1,21 @@ +Description: Change .gnupg directory permissions to 700 + The .hplip/.gnupg directory has permissions of 755. While + only public keys are stored in this directory, it can still + be seen as a privacy issue that the keys are readable by + any user. Changing the permissions to 700 fixes this issue +Author: zdohnal +Bug: https://bugs.launchpad.net/ubuntu/+source/hplip/+bug/1938442 +Last-Update: 2021-10-29 +--- +This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ +--- a/base/validation.py ++++ b/base/validation.py +@@ -53,7 +53,7 @@ + + if not os.path.exists(self.__gpg_dir): + try: +- os.mkdir(self.__gpg_dir, 0o755) ++ os.mkdir(self.__gpg_dir, 0o700) + except OSError: + log.error("Failed to create %s" % self.__gpg_dir) + self.__change_owner() diff -Nru hplip-3.21.2+dfsg1/debian/patches/series hplip-3.21.2+dfsg1/debian/patches/series --- hplip-3.21.2+dfsg1/debian/patches/series 2021-03-05 07:20:56.000000000 -0600 +++ hplip-3.21.2+dfsg1/debian/patches/series 2021-10-29 13:49:05.000000000 -0500 @@ -79,3 +79,4 @@ 0079-Workaround-Add-32-bytes-to-allocation-ColorMatcher.patch 0080-Workaround-Add-32-bytes-to-allocation-Halftoner.patch 0081-Workaround-Add-32-bytes-to-allocation-Compressor.patch +0082-fix-permissions-on-gnupg-dir.patch