#11676: sage-pkg does not force world-readable permissions
-------------------------------+--------------------------------------------
Reporter: AlexanderDreyer | Owner: AlexanderDreyer
Type: defect | Status: needs_review
Priority: major | Milestone: sage-4.7.2
Component: scripts | Keywords: chmod umask install mode
Work_issues: | Upstream: N/A
Reviewer: | Author: Alexander Dreyer
Merged: | Dependencies:
-------------------------------+--------------------------------------------
Old description:
> As pointed out here: #11660 and here: #11664 archives have to be world-
> readable. sage-pkg does not enforce this.
>
> == Current patch for Sage's local/bin repository ==
> http://trac.sagemath.org/sage_trac/raw-attachment/ticket/11676/sage-pkg-
> tarmode.1.patch
New description:
As pointed out here: #11660 and here: #11664 archives have to be world-
readable. sage-pkg does not enforce this.
== Current patch for Sage's local/bin repository ==
[attachment:http://trac.sagemath.org/sage_trac/raw-attachment/ticket/11676
/sage-pkg-tarmode.1.patch]
--
Comment(by jdemeyer):
Replying to [comment:8 leif]:
> Well, it's sometimes better to know who packaged an spkg (though one can
easily fake this of course). ;-)
I don't see the point why this information is useful, one would better
look at the `hg log` or `SPKG.txt` for this. With my current merge-script
this information is lost anyway because every spkg is unpacked and
repacked (in between changes are committed, a `hg tag` is added and the
spkg is checked for some obvious mistakes).
--
Ticket URL: <http://trac.sagemath.org/sage_trac/ticket/11676#comment:12>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/sage-trac?hl=en.
