Hi IceCat maintainers,

I've spotted that the last couple of releases of IceCat install some
files with permission 0600, from the https-everywhere and
html5-video-everywhere plugins. If you're doing a system installation
then the files wouldn't be readable by regular users.

After a DESTDIR installation into "dest" (as user "garstow"):
$ find dest/ -perm 600 -ls
 41551955      4 -rw-------   1  garstow  garstow      3234 Jan  1  1980 
dest/gar/lib/icecat-38.7.1/browser/extensions/[email protected]/install.rdf
  41551956      8 -rw-------   1  garstow  garstow      4909 Apr 10 19:30 
dest/gar/lib/icecat-38.7.1/browser/extensions/[email protected]/chrome.manifest
[...]

This appears to be because those files are mode 0600 in the source
tarball:

$ tar tvf download/icecat-38.7.1-gnu1.tar.bz2 | grep -- ------
[...]
-rw------- ruben/ruben   32999 1980-01-01 06:00
icecat-38.7.1/extensions/gnu/[email protected]/components/https-everywhere.js
-rw------- ruben/ruben   34946 1980-01-01 06:00
icecat-38.7.1/extensions/gnu/[email protected]/components/ssl-observatory.js
[...]

Would it be worth explicitly setting the permissions on installation?

Thanks very much,

-- 
Adam Sampson <[email protected]>                         <http://offog.org/>

--
http://gnuzilla.gnu.org

Reply via email to