Urgent 3.2: Linux install from repository mistake; security possibly compromised

[mattst]

@wbond

Re: Sublime Text Linux, version 3.2 build 3200

I just noticed in my Linux '/opt/sublime_text/' directory that each of the ST files is now owned by a user called '501' and in the 'staff' group.

The directories are all owned by 'root' and in the 'root' group as usual.

Sublime Text is running fine - you’d have a heard a mass of voices by now if it wasn’t - but clearly a mistake has been made.

I am unsure about the security aspects of this. Unsurprisingly there is no user '501' on my system although the 'staff' group has been (presumably automatically) created. Certainly I suspect that security might have been compromised.

Hope this helps and gets resolved as a matter of priority.

[wbond]

You didn’t indicate what distro you are using, nor which package manager.

[mattst]

Oops, I’m an idiot.

Linux Mint, which uses the Ubuntu repository, and the apt package manager.

Sorry about that.

[wbond]

It appears that the fakeroot environment we’ve been using during cross-compiles has not been properly resetting file ownership to root:root for Linux tarballs and packages. We’ll work on getting this resolved.