Re: Portupgrade & Ruby | warning: Insecure world

2006-04-05 Thread Garance A Drosihn

At 3:38 PM +0200 4/5/06, Jonas Jacobsen wrote:

When i use portupgrade, i get this Warning all the time

/usr/local/lib/ruby/site_ruby/1.8/pkgtools.rb:980:
warning: Insecure world writable dir /tmp, mode 041777

have any of you seen that warning before,? and do you
know how to make it go away ?


This comes from a recent security-minded change made
to ruby.  Your PATH references something in /tmp, and
since other userids *could* change things in /tmp,
this is warning that you might have a security problem.

I think several ruby users have found this recent change
is perhaps a bit over-zealous in it's warning.  Which is
to say, "it is annoying".

You could change your setting of PATH to avoid this.
Perhaps the pkgtools.rb script could be changed to
automatically change the PATH, but in this case it
would have no idea *why* you reference some directory
under /tmp in your PATH.  So it's probably a bad idea
for the script to change the value.

--
Garance Alistair Drosehn=   [EMAIL PROTECTED]
Senior Systems Programmer   or  [EMAIL PROTECTED]
Rensselaer Polytechnic Instituteor  [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Portupgrade & Ruby | warning: Insecure world

2006-04-05 Thread Zimmerman, Eric
> > have any of you seen that warning before,? and do you know how to
make
> > it go away ?
> 
> Not seen it but check the ouput of
> $ ls -ld /tmp
> (mode should be drwxrwxrwt)
> 
> Maybe it is drwxrwxrwx, in which case
> # chmod o+t /tmp
> will fix it.  Otherwise I'm not sure.
> 

Using portmanager would make it go away, and save you a ton of time =)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Portupgrade & Ruby | warning: Insecure world

2006-04-05 Thread Ashley Moran
On Wednesday 05 April 2006 14:38, Jonas Jacobsen wrote:
> When i use portupgrade, i get this Warning all the time
>
> /usr/local/lib/ruby/site_ruby/1.8/pkgtools.rb:980: warning: Insecure
> world writable dir /tmp, mode 041777
>
> have any of you seen that warning before,? and do you know how to make
> it go away ?

Not seen it but check the ouput of 
$ ls -ld /tmp
(mode should be drwxrwxrwt)

Maybe it is drwxrwxrwx, in which case
# chmod o+t /tmp
will fix it.  Otherwise I'm not sure. 

Ashley
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Portupgrade & Ruby | warning: Insecure world

2006-04-05 Thread Jonas Jacobsen

When i use portupgrade, i get this Warning all the time

/usr/local/lib/ruby/site_ruby/1.8/pkgtools.rb:980: warning: Insecure 
world writable dir /tmp, mode 041777


have any of you seen that warning before,? and do you know how to make 
it go away ?



--
Med venlig hilsen
Jonas Jacobsen
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"