Re: New CPAN Testers Reports site

2008-09-23 Thread Gabor Szabo
On Mon, Sep 22, 2008 at 7:08 AM, David E. Wheeler [EMAIL PROTECTED] wrote: On Sep 20, 2008, at 00:29, Barbie wrote: See http://use.perl.org/~barbie/journal/37496 for all the gory details. Barbie++ # Thank you! More Barbie++ BTW you could double the link entries in the PAUSEID.html file so

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Eric Wilhelm wrote: # from chromatic # on Monday 22 September 2008 17:37: Yes.  Would someone please explain to me how this issue is not already made a mostly non-issue by having a proper umask and running CPAN as non-root? If I were so inclined and had

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Eric Wilhelm
# from Shlomi Fish # on Monday 22 September 2008 23:55: There would be no mechanism because tar respects the umask by default when invoked as a non-root user.  Thus, there are no world-writable files being unpacked from CPAN dists on my machine. Is a umask of 022 not the default setup?  

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Eric Wilhelm wrote: # from Shlomi Fish # on Monday 22 September 2008 23:55: There would be no mechanism because tar respects the umask by default when invoked as a non-root user.  Thus, there are no world-writable files being unpacked from CPAN dists on my

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Eric Wilhelm
# from Ovid # on Tuesday 23 September 2008 00:54: Of course, even as Eric pointed out, a umask of 0002  still masks the world writeable permissions, so I still don't see how you're getting there and if you've configured your system to give *you* a umask of 0022, then you still shouldn't be

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Andreas J. Koenig
On Mon, 22 Sep 2008 22:37:55 +0200, [EMAIL PROTECTED] (Andreas J. Koenig) said: (d) Something else I lean toward PAUSE not indexing them thus pulling the plug as early as possible. And so I have implemented it now. If it breaks too much in too short time, we could probably revert it,

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Ovid wrote: --- On Tue, 23/9/08, Shlomi Fish [EMAIL PROTECTED] wrote: The default Mandriva umask appears to be 0002 . That surprised me, so I googled default mandriva umask. All the references I found say the default umask is 0022 ... unless ... Mandriva

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Eric Wilhelm wrote: # from Ovid # on Tuesday 23 September 2008 00:54: Of course, even as Eric pointed out, a umask of 0002  still masks the world writeable permissions, so I still don't see how you're getting there and if you've configured your system to give

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Andreas J. Koenig
On Mon, 22 Sep 2008 16:00:41 -0400, David Golden [EMAIL PROTECTED] said: Problem 1: race condition between unarchiving and execution if Makefile.PL or Build.PL is world writable (ditto test files as well) (a) Have CPAN and CPANPLUS refuse to run 'perl *.PL' if the PL in question

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Smylers
Ovid writes: --- On Tue, 23/9/08, Shlomi Fish [EMAIL PROTECTED] wrote: The default Mandriva umask appears to be 0002 . That surprised me In general 0002 (aka u=rwx,g=rwx,o=rx) is the right choice of umask on a sytem where each user has their own group -- that is, where the user ovid has

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Jos I. Boumans
On Sep 23, 2008, at 6:30 AM, Andreas J. Koenig wrote: On Mon, 22 Sep 2008 22:37:55 +0200, andreas.koenig. [EMAIL PROTECTED] (Andreas J. Koenig) said: (d) Something else I lean toward PAUSE not indexing them thus pulling the plug as early as possible. And so I have implemented it now.

Module::CPANTS::Analyse has_test_pod fails on my module but it has pod tests

2008-09-23 Thread Martin Evans
Hi, I have recently been taking more notice of CPANTS and made some changes to DBD::ODBC to get more kwalitee. I'm basically getting a fail on has_test_pod (http://cpants.perl.org/dist/kwalitee/DBD-ODBC) which I've duplicated myself with Module::CPANTS::Analyse. However, I have a pod test

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread Eric Wilhelm
# from Shlomi Fish # on Tuesday 23 September 2008 03:00: [EMAIL PROTECTED] Data-Dump-Streamer-2.08-40]$ ls -l Makefile.PL -rwxrwxrwx 1 cpan cpan 3792 2006-04-16 18:33 Makefile.PL* Apparently that is using Archive::Tar by way of Archive::Extract (says bingos.) So, something needs to set

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 3:06 PM, Eric Wilhelm [EMAIL PROTECTED] wrote: So, something needs to set $Archive::Tar::CHMOD = 1; to make it behave like gnu tar. $Archive::Tar::CHMOD = 1 or 0? The default is 1. From the Pod: By default, Archive::Tar will try to chmod your files to whatever mode

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread Eric Wilhelm
# from David Golden # on Tuesday 23 September 2008 12:42: So, something needs to set $Archive::Tar::CHMOD = 1; to make it behave like gnu tar. $Archive::Tar::CHMOD = 1 or 0? The default is 1.  From the Pod: Yeah, sorry. 0. It has a default which is opposite of gnu tar. If it's that easy, I

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 3:53 PM, Eric Wilhelm [EMAIL PROTECTED] wrote: Yeah, sorry. 0. It has a default which is opposite of gnu tar. If it's that easy, I can go patch CPAN.pm right away. Done: CPAN.pm is patched in trunk. And CPANPLUS I guess. I'm not sure what else happens in

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Cantrell
On Tue, Sep 23, 2008 at 12:53:33PM -0700, Eric Wilhelm wrote: There is also still an issue using gnu tar if you run as root. And are there other tar programs? Unfortunately yes. If people can point me at some simple tests (sorry, I've not been following this thread), I can see what these tars

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 7:27 PM, David Cantrell [EMAIL PROTECTED] wrote: If people can point me at some simple tests (sorry, I've not been following this thread), I can see what these tars do: NetBSD FreeBSD Irix Solaris They all appear to be different - at least, they all respond