Lintian tag: executable-is-not-world-readable

Type: warning

Description (from lintian-explain-tags)

All executables should be readable by any user. Since anyone can download
the Debian package and obtain a copy of the executable, no security is
gained by making the executable unreadable even for setuid binaries. If
only members of a certain group may execute this file, remove execute
permission for world, but leave read permission.

Please refer to Permissions and owners (Section 10.9) in the Debian Policy
Manual for details.

Visibility: warning
Show-Always: no
Check: files/permissions

Affected packages

source version binary tag type tag information count
amanda 1:3.5.4-1 amanda-common/1:3.5.4-1 warning executable-is-not-world-readable 4750 [usr/lib/amanda/ambind] 9
cups-filters 1.28.17-5 cups-browsed/1.28.17-5 overridden executable-is-not-world-readable 0700 [usr/lib/cups/backend/implicitclass] 9
cups-filters 1.28.17-5 cups-filters/1.28.17-5 overridden executable-is-not-world-readable 0700 [usr/lib/cups/backend/cups-brf] 9
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/i386-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnettrace-dns] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/mips64el-linux-gnuabi64/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/powerpc64le-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/x86_64-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/s390x-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabihf/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/aarch64-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2 overridden executable-is-not-world-readable 0711 [usr/lib/arm-linux-gnueabi/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnettrace] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fldd] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fsec-print] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fshaper.sh] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fseccomp] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnettrace-icmp] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fcopy] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnet] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fsec-optimize] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnetfilter] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnettrace-sni] 1
firejail 0.9.72-2 firejail/0.9.72-2+b1 overridden executable-is-not-world-readable 0711 [usr/lib/riscv64-linux-gnu/firejail/fnettrace-dns] 1
fis-gtm 7.0-005-2.1 fis-gtm-7.0/7.0-005-2.1 overridden executable-is-not-world-readable 4500 [usr/lib/x86_64-linux-gnu/fis-gtm/V7.0-005_x86_64/gtmsecshrdir/gtmsecshr] 1
fis-gtm 7.0-005-2.1 fis-gtm-7.0/7.0-005-2.1 overridden executable-is-not-world-readable 4500 [usr/lib/x86_64-linux-gnu/fis-gtm/V7.0-005_x86_64/utf8/gtmsecshrdir/gtmsecshr] 1
integrit 4.1-5 integrit/4.1-5 warning executable-is-not-world-readable 0500 [usr/sbin/i-viewdb] 9
integrit 4.1-5 integrit/4.1-5 warning executable-is-not-world-readable 0500 [usr/sbin/integrit] 9
samba 2:4.21.0+dfsg-1 smbclient/2:4.21.0+dfsg-1 overridden executable-is-not-world-readable 0700 [usr/libexec/samba/smbspool_krb5_wrapper] 9
sssd 2.9.5-3 sssd-ipa/2.9.5-3+b2 warning executable-is-not-world-readable 4750 [usr/libexec/sssd/selinux_child] 9
sssd 2.9.5-3 sssd-krb5-common/2.9.5-3+b2 warning executable-is-not-world-readable 4750 [usr/libexec/sssd/ldap_child] 9
sssd 2.9.5-3 sssd-krb5-common/2.9.5-3+b2 warning executable-is-not-world-readable 4750 [usr/libexec/sssd/krb5_child] 9