World Writable Files in the icc RPMs on Mandriva Linux

[shlomifiglu_org_il]

Hi!

I'm using Mandriva Linux (Cooker) and after downloading and installing Intel's icc, I was able to compile http://fc-solve.berlios.de/ with it succesfully. Everything seemed fine until I received the latest msec (= Mandriva security) report which reported some world-writable files in the installation:

{{{{{{{{{{{{
Security Warning: Change in World Writable Files found :
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/blas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/cblas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/dft_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/functions_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/lapack_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/makefile
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/spblas_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/user_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/builder/vml_vsl_list
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars32.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars32.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars64.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvars64.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvarsem64t.csh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/environment/mklvarsem64t.sh
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/build.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/doc.zip
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/helpdata.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/mkl_index.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/mkl_toc.xml
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/plugin.properties
- Newly added writable file : /opt/intel/Compiler/11.0/081/mkl/tools/plugins/com.intel.mkl.help/plugin.xml
- Newly added writable file : /tmp/FLEXnet
- Newly added writable file : /usr/local/share/macrovision/storage/FLEXnet
- Newly added writable file : /usr/local/share/macrovision/storage/FLEXnet/INTEL_00211300_tsf.data
}}}}}}}}}}}}

World-writable files are a security breach and should not be present. Please fix this fact for the next release.

[Om_S_Intel]

Yes, these files should not be writable by world. These files should have only read and excute/search permision for the world. You may submit an issue to Intel Support.

The administrator could change the permission to fix the problem.

[Om_S_Intel]

I have reported the issue to Intel's development team.

[shlomifiglu_org_il]

Quoting - Om Sachan (Intel)

I have reported the issue to Intel's development team.

Thanks!

Regards,

-- Shlomi Fish

[Om_S_Intel]

This was examined in the l_cproc_p_11.1.057_ia32 package and found to not be a problem.

The l_cproc_p_11.1.056_ia32 package (RTM'd as 11.1 Update 2) was also checked and did not exhibit this problem.

Additonal comment: there are NO supported versions of Mandriva in the Linux operating system supported OS matrix.

Additional comment on licensing files:

Any files mentioned that are part of the FlexNET content are licensing files, and these may well be maintained in a world-writable fashion for proper execution of the licensing management and license checking process.