[
https://issues.apache.org/jira/browse/MRESOLVER-313?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17655088#comment-17655088
]
ASF GitHub Bot commented on MRESOLVER-313:
------------------------------------------
cstamas opened a new pull request, #234:
URL: https://github.com/apache/maven-resolver/pull/234
Collocated temp file should NOT use Files.createTempFile as it uses 0600
perms and not relies implicitly on umask.
---
https://issues.apache.org/jira/browse/MRESOLVER-313
> Artifact file permissions are 0600 and not implicitly set by umask
> ------------------------------------------------------------------
>
> Key: MRESOLVER-313
> URL: https://issues.apache.org/jira/browse/MRESOLVER-313
> Project: Maven Resolver
> Issue Type: Bug
> Components: Resolver
> Reporter: Tamas Cservenak
> Priority: Major
> Fix For: 1.9.4
>
>
> With introduction of FileUtils, and widespread use of CollocatedTempFile, one
> problem occurs: in both "temp file" cases Files.createTempFile is being used,
> that uses 0600 permissions instead to rely on umask.
> In case of TempFile this is OK, but in case of CollocatedTempFile this is NOT
> OK, as these files are usually moved to their "final" place (like artifact in
> local repo once downloaded and verified).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
