World Writable Files in the icc RPMs on Mandriva Linux

World Writable Files in the icc RPMs on Mandriva Linux

shlomifiglu.org.il's picture

Hi!

I'm using Mandriva Linux (Cooker) and after downloading and installing Intel's icc, I was able to compile http://fc-solve.berlios.de/ with it succesfully. Everything seemed fine until I received the latest msec (= Mandriva security) report which reported some world-writable files in the installation:

{{{{{{{{{{{{
Security Warning: Change in World Writable Files found :
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/blas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/cblas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/dft_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/functions_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/lapack_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/makefile
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/spblas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/user_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/vml_vsl_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars32.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars32.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars64.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars64.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvarsem64t.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvarsem64t.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/build.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/doc.zip
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/helpdata.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/mkl_index.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/mkl_toc.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/plugin.properties
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/plugin.xml
- Newly added writable file : /tmp/FLEXnet
- Newly added writable file : /usr/local/share/macrovision/storage/FLEXnet
- Newly added writable file : /usr/local/share/macrovision/storage/FLEXnet/INTEL_00211300_tsf.data
}}}}}}}}}}}}

World-writable files are a security breach and should not be present. Please fix this fact for the next release.

5 posts / 0 new
Last post
For more complete information about compiler optimizations, see our Optimization Notice.
om-sachan (Intel)'s picture

Yes, these files should not be writable by world. These files should have only read and excute/search permision for the world. You may submit an issue to Intel Support.

The administrator could change the permission to fix the problem.

om-sachan (Intel)'s picture

I have reported the issue to Intel's development team.

shlomifiglu.org.il's picture
Quoting - Om Sachan (Intel)
I have reported the issue to Intel's development team.

Thanks!

Regards,

-- Shlomi Fish

om-sachan (Intel)'s picture

This was examined in the l_cproc_p_11.1.057_ia32 package and found to not be a problem.

The l_cproc_p_11.1.056_ia32 package (RTM'd as 11.1 Update 2) was also checked and did not exhibit this problem.

Additonal comment: there are NO supported versions of Mandriva in the Linux operating system supported OS matrix.

Additional comment on licensing files:

Any files mentioned that are part of the FlexNET content are licensing files, and these may well be maintained in a world-writable fashion for proper execution of the licensing management and license checking process.

Login to leave a comment.