Bug 28934 - Ausführbare Grafik-/JS-Dateien in UMC
Ausführbare Grafik-/JS-Dateien in UMC
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 3.0
Other Linux
: P5 minor (vote)
: UCS 3.1
Assigned To: Lukas Walter
Dirk Wiesenthal
: interim-3
Depends on:
Blocks: 29233
  Show dependency treegraph
 
Reported: 2012-10-26 09:00 CEST by Philipp Hahn
Modified: 2012-12-12 21:08 CET (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2012-10-26 09:00:38 CEST
# find /usr/share/univention-management-console-frontend/js -type f -perm /0111 -printf '%M\t%P\n'
-rwxr-xr-x      dijit/themes/tundra/images/checkmark.gif
-rwxr-xr-x      dijit/themes/tundra/images/checkmarkNoBorder.gif
-rwxr-xr-x      dijit/themes/tundra/images/tabHover.gif
-rwxr-xr-x      dijit/themes/tundra/images/circleIcon.gif
-rwxr-xr-x      dijit/themes/tundra/images/tabClose.gif
-rwxr-xr-x      dijit/themes/tundra/images/checkmarkNoBorder.png
-rwxr-xr-x      dijit/themes/tundra/images/tabCloseHover.gif
-rwxr-xr-x      dijit/themes/tundra/images/dojoTundraGradientBg.gif
-rwxr-xr-x      dijit/themes/tundra/images/circleIcon.png
-rwxr-xr-x      dijit/themes/tundra/images/loading.gif
-rwxr-xr-x      dijit/themes/tundra/images/validationInputBg.gif
-rwxr-xr-x      dijit/themes/tundra/images/treeExpand_minus.gif
-rwxr-xr-x      dijit/themes/tundra/images/treeExpand_plus.gif
-rwxr-xr-x      dijit/themes/tundra/images/i_half.gif
-rwxr-xr-x      dijit/themes/tundra/images/i.gif
-rwxr-xr-x      dijit/themes/tundra/images/sliderFullVerticalFocus.png
-rwxr-xr-x      dijit/themes/tundra/images/sliderFullFocus.png
-rwxr-xr-x      dijit/themes/tundra/images/preciseSliderThumb.gif
-rwxr-xr-x      dijit/themes/tundra/images/noX.gif
-rwxr-xr-x      umc/modules/join.js
-rwxr-xr-x      umc/modules/setup.js
-rwxr-xr-x      umc/modules/lib.js
-rwxr-xr-x      umc/modules/packages/AppCenterPage.js
-rwxr-xr-x      umc/modules/packages/SearchForm.js
-rwxr-xr-x      umc/modules/packages/SettingsPage.js
-rwxr-xr-x      umc/modules/packages/PackagesPage.js
-rwxr-xr-x      umc/modules/packages/DetailsPage.js
-rwxr-xr-x      umc/modules/reboot.js
-rwxr-xr-x      umc/modules/udm.js
-rwxr-xr-x      umc/modules/lib/server.js
-rwxr-xr-x      umc/modules/services.js
-rwxr-xr-x      umc/modules/join/Form.js
-rwxr-xr-x      umc/modules/top.js
-rwxr-xr-x      umc/modules/mrtg.js
-rwxr-xr-x      umc/modules/ipchange.js
-rwxr-xr-x      umc/modules/updater/UpdatesPage.js
-rwxr-xr-x      umc/modules/updater/Form.js
-rwxr-xr-x      umc/modules/updater/ProgressPage.js
-rwxr-xr-x      umc/modules/updater/Page.js
-rwxr-xr-x      umc/modules/updater/_LogViewer.js
-rwxr-xr-x      umc/modules/updater/_PollingMixin.js
-rwxr-xr-x      umc/modules/i18n/de/mrtg.json
-rwxr-xr-x      umc/modules/i18n/de/services.json
-rwxr-xr-x      umc/modules/i18n/de/quota.json
-rwxr-xr-x      umc/modules/i18n/de/lib.json
-rwxr-xr-x      umc/modules/i18n/de/sysinfo.json
-rwxr-xr-x      umc/modules/i18n/de/reboot.json
-rwxr-xr-x      umc/modules/i18n/de/join.json
-rwxr-xr-x      umc/modules/i18n/de/updater.json
-rwxr-xr-x      umc/modules/i18n/de/ipchange.json
-rwxr-xr-x      umc/modules/i18n/de/top.json
-rwxr-xr-x      umc/modules/i18n/de/setup.json
-rwxr-xr-x      umc/modules/i18n/de/uvmm.json
-rwxr-xr-x      umc/modules/i18n/de/ucr.json
-rwxr-xr-x      umc/modules/i18n/de/packages.json
-rwxr-xr-x      umc/modules/i18n/de/udm.json
-rwxr-xr-x      umc/modules/uvmm/DriveWizard.js
-rwxr-xr-x      umc/modules/uvmm/InterfaceGrid.js
-rwxr-xr-x      umc/modules/uvmm/TreeModel.js
-rwxr-xr-x      umc/modules/uvmm/DriveGrid.js
-rwxr-xr-x      umc/modules/uvmm/DomainPage.js
-rwxr-xr-x      umc/modules/uvmm/types.js
-rwxr-xr-x      umc/modules/uvmm/InterfaceWizard.js
-rwxr-xr-x      umc/modules/uvmm/DomainWizard.js
-rwxr-xr-x      umc/modules/uvmm/SnapshotGrid.js
-rwxr-xr-x      umc/modules/udm/NewObjectDialog.js
-rwxr-xr-x      umc/modules/udm/callbacks.js
-rwxr-xr-x      umc/modules/udm/ComboBox.js
-rwxr-xr-x      umc/modules/udm/DetailPage.js
-rwxr-xr-x      umc/modules/udm/Template.js
-rwxr-xr-x      umc/modules/udm/MultiObjectSelect.js
-rwxr-xr-x      umc/modules/udm/TreeModel.js
-rwxr-xr-x      umc/modules/udm/LicenseDialog.js
-rwxr-xr-x      umc/modules/udm/OverwriteLabel.js
-rwxr-xr-x      umc/modules/udm/CreateReportDialog.js
-rwxr-xr-x      umc/modules/udm/CertificateUploader.js
-rwxr-xr-x      umc/modules/udm/license.html
-rwxr-xr-x      umc/modules/udm/license_v2.html
-rwxr-xr-x      umc/modules/sysinfo.js
-rwxr-xr-x      umc/modules/updater.js
-rwxr-xr-x      umc/modules/packages.js
-rwxr-xr-x      umc/modules/ucr.js
-rwxr-xr-x      umc/modules/quota/PageContainer.js
-rwxr-xr-x      umc/modules/quota/PartitionPage.js
-rwxr-xr-x      umc/modules/quota/DetailPage.js
-rwxr-xr-x      umc/modules/uvmm.js
-rwxr-xr-x      umc/modules/setup/LanguagePage.js
-rwxr-xr-x      umc/modules/setup/BasisPage.js
-rwxr-xr-x      umc/modules/setup/SoftwarePage.js
-rwxr-xr-x      umc/modules/setup/SystemRolePage.js
-rwxr-xr-x      umc/modules/setup/NetworkPage.js
-rwxr-xr-x      umc/modules/setup/HelpPage.js
-rwxr-xr-x      umc/modules/setup/CertificatePage.js
-rwxr-xr-x      umc/modules/quota.js
-rwxr-xr-x      dojox/dgauges/LICENSE
-rwxr-xr-x      dojox/dgauges/README
-rwxr-xr-x      dojox/image/resources/images/loading.gif
-rwxr-xr-x      dojox/image/resources/images/left.gif
-rwxr-xr-x      dojox/image/resources/images/right.png
-rwxr-xr-x      dojox/image/resources/images/right.gif
-rwxr-xr-x      dojox/image/resources/images/left.png
-rwxr-xr-x      dojox/image/resources/images/close.png
-rwxr-xr-x      dojox/image/resources/images/close.gif
-rwxr-xr-x      dojox/image/resources/images/close_dark.png
-rwxr-xr-x      dojox/calendar/themes/soria/Common.less
-rwxr-xr-x      dojox/calendar/themes/tundra/Common.less
-rwxr-xr-x      dojox/calendar/themes/nihilo/Common.less
-rwxr-xr-x      dojox/rpc/SMDLibrary/google.smd
-rwxr-xr-x      dojox/rpc/SMDLibrary/yahoo.smd
-rwxr-xr-x      dojox/mobile/build/build.bat
-rwxr-xr-x      dojox/mobile/build/build.sh
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/tab-sel-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/white-arrow.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/tab-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/icon-content-heading-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/blue-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/blue-button-sel-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/arrow-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/gray-arrow.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/heading-bg.png
-rwxr-xr-x      dojox/mobile/themes/iphone/compat/arrow-button-head.png
-rwxr-xr-x      dojox/mobile/themes/iphone/images/thumb-overlay.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/tab-sel-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/tab-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/icon-content-heading-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/blue-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/tab-orange-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/arrow-button-bg.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/gray-arrow.png
-rwxr-xr-x      dojox/mobile/themes/android/compat/arrow-button-head.png
-rwxr-xr-x      dojox/mobile/themes/android/images/thumb-overlay.png
-rwxr-xr-x      dojox/mobile/README
-rwxr-xr-x      dojox/layout/resources/icons/gridcontainer_grip.gif
-rwxr-xr-x      dojox/layout/resources/icons/resize.png
-rwxr-xr-x      dojox/layout/resources/icons/splitterToggleV.png
-rwxr-xr-x      dojox/layout/resources/icons/pixel.gif
-rwxr-xr-x      dojox/layout/resources/icons/splitterToggleH.png
-rwxr-xr-x      dojox/layout/resources/icons/grip_bg.gif
-rwxr-xr-x      dojox/layout/resources/icons/rotator.png
-rwxr-xr-x      dojox/editor/plugins/resources/images/anchor.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/soria/collapse.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/soria/sidebar.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/soria/expand.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/tundra/collapse.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/tundra/sidebar.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/tundra/expand.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/claro/collapse.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/claro/expand.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/pre.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/noscript.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/ul.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h3.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/table.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/ins.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h2.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/fieldset.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/hr.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/dt.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/script.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/map.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/dd.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/li.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h1.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/object.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/iframe.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/del.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/ol.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/form.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/blockquote.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h4.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h6.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/center.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/address.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/button.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/p.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/h5.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/blockelems/div.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/nihilo/collapse.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/nihilo/sidebar.gif
-rwxr-xr-x      dojox/editor/plugins/resources/images/nihilo/expand.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/spellcheck.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/pasteFromWord.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/blockquoteDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/anchor.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/soria/close.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/saveDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/save.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/breadcrumbDown.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/previewDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/pageBreak.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/insertEntityDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/showBlockNodes.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/tundra/close.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/anchorDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/blockquote.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/claro/close.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/showBlockNodesDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/pageBreakDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/pasteFromWordDisabled.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/insertEntity.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/preview.gif
-rwxr-xr-x      dojox/editor/plugins/resources/icons/nihilo/close.gif
-rwxr-xr-x      dojox/data/demos/openSearchProxy.php
-rwxr-xr-x      dojox/data/demos/stores/filestore_dojoxdata.php
-rwxr-xr-x      dojox/data/demos/stores/filestore_funcs.php
-rwxr-xr-x      dojox/data/demos/stores/filestore_dojotree.php
-rwxr-xr-x      dojox/data/demos/geography2.xml
-rwxr-xr-x      dojox/drawing/resources/images/tool_icons.png
-rwxr-xr-x      dojox/app/README.txt
-rwxr-xr-x      dojox/app/LICENSE
-rwxr-xr-x      dojox/analytics/logger/JSON.php
-rwxr-xr-x      dojox/widget/Loader/icons/loading.gif
-rwxr-xr-x      dojox/widget/Standby/images/loading.gif
-rwxr-xr-x      dojox/widget/ColorPicker/images/underlay.png
-rwxr-xr-x      dojox/widget/ColorPicker/images/hueHandleA11y.png
-rwxr-xr-x      dojox/widget/ColorPicker/images/hueHandle.png
-rwxr-xr-x      dojox/widget/ColorPicker/images/pickerPointer.png
-rwxr-xr-x      dojox/widget/ColorPicker/images/hue.png
-rwxr-xr-x      dojox/NodeList/README

Das sollte so nicht sein
Comment 1 Alexander Kläser univentionstaff 2012-10-26 10:40:09 CEST
Lukas, könntest du bitte hier einmal nachschauen und dies korrigieren (in den Paketen umc-frontend, univention-dojo)?
Comment 2 Lukas Walter univentionstaff 2012-10-29 14:01:28 CET
.js/.py Dateien der UMC Module werden nun mit Modus "644" (-rw-r--r--) angelegt.

Die Bilder stammen so aus Dojo, ich würde sie daher so lassen (da auch unkritisch); wenn ich da was übersehe -> wieder aufmachen.


univention-management-console (5.0.50-1) unstable; urgency=low
  * use "644" as file permission mode at "install" calls
    in "dc-umc-module-install" when processing .js/.py files
    (Bug #28934)

svn 36698
Comment 3 Dirk Wiesenthal univentionstaff 2012-11-13 17:02:37 CET
Meiner Einschätzung nach tatsächlich unkritisch bei den Dojo-Bildern. Aber da das eben komplett egal ist, kann man das ruhig anfassen. Ich kann mir nicht vorstellen, dass das etwas kaputt macht. Und wenn doch, muss das ohnehin mal bei Dojo gefixt werden. Wahrscheinlich ist es nur ein umpaketieren des dojo-Archivs?

Darüber hinaus gibt es noch ein paar UMC-Komponenten, insbesondere umc/modules/lib/server.js und die json-Dateien.
Comment 4 Stefan Gohmann univentionstaff 2012-11-15 06:44:55 CET
(In reply to comment #3)
> Meiner Einschätzung nach tatsächlich unkritisch bei den Dojo-Bildern. Aber da
> das eben komplett egal ist, kann man das ruhig anfassen. Ich kann mir nicht
> vorstellen, dass das etwas kaputt macht. Und wenn doch, muss das ohnehin mal
> bei Dojo gefixt werden. Wahrscheinlich ist es nur ein umpaketieren des
> dojo-Archivs?
> 
> Darüber hinaus gibt es noch ein paar UMC-Komponenten, insbesondere
> umc/modules/lib/server.js und die json-Dateien.

Da das nicht so wichtig ist, habe ich das ausgelagert: Bug #29233
Comment 5 Dirk Wiesenthal univentionstaff 2012-11-15 12:50:06 CET
Dann VERIFIED
Comment 6 Stefan Gohmann univentionstaff 2012-12-12 21:08:32 CET
UCS 3.1-0 has been released: 
 http://forum.univention.de/viewtopic.php?f=54&t=2125

If this error occurs again, please use "Clone This Bug".