[buildd-tools-devel] Bug#726866: libsbuild-perl: "sbuild-update --keygen": wrong group permissions for sbuild-key.pub

[Johannes Schauer]

Hi,

On Sun, 20 Oct 2013 01:11:33 +0200 Pierre-Louis Bonicoli <pierre-louis.bonicoli at gmx.fr> wrote:
> "sbuild-update --keygen" generates sbuild-key.pub and sbuild-key.sec
> files (default location is "/var/lib/sbuild/apt-keys/").
> 
> The generated file sbuild-key.pub is owned by $BUILD_USER:sbuild with
> access permission set to 0600. So when a user (root or an user belonging to
> 'sbuild' group) use "sbuild-update --keygen", this file is not readable
> by other users and "sbuild" command fails:
> 
> > gpg: keyring `/«BUILDDIR»/resolver-GS4RzV/apt_archive/sbuild-key.pub' created
> > gpg: key AEF9CEB5: secret key without public key - skipped
> > gpg: no default secret key: secret key not available
> > gpg: signing failed: secret key not available
> > Failed to sign dummy archive Release file.
> 
> Attached patch change group permissions (0640).

are you still able to reproduce this bug?

I am not so if you have no objection, I'd close this bug.

Thanks!

cheers, josch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20150913/4d55ad32/attachment.sig>