dongjoon-hyun opened a new pull request, #57175:
URL: https://github.com/apache/spark/pull/57175

   ### What changes were proposed in this pull request?
   
   This PR aims to use the existing `fcreate_secure` helper to create 
credential files with `600` permission before writing `ASF_PASSWORD` into them 
in `release-build.sh`:
   
   - `publish-release`: create `~/.msmtprc` via `fcreate_secure` (removing the 
after-the-fact `chmod 600`), and remove the file after sending the RC vote 
email.
   - `publish-snapshot`: create `tmp-settings.xml` via `fcreate_secure`.
   
   ### Why are the changes needed?
   
   Previously, these files were briefly readable by other local users because 
they were written with the default umask permission first. In addition, 
`~/.msmtprc` was never deleted, leaving the password on disk in plaintext.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No. This is a developer-only release script change.
   
   ### How was this patch tested?
   
   Manually review.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: Claude Fable 5


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to