Re: [PATCH] ExtUtils::MakeMaker and world writable files in dists

2008-09-30 Thread Cosimo Streppone
På Tue, 30 Sep 2008 04:05:51 +0200, skrev Michael G Schwern <[EMAIL PROTECTED]>: Aristotle Pagaltzis wrote: [...] The idea was to relieve Windows users from having to hack their tar before they can use EU::MM to bake distros that the CPAN indexer will not reject. Allow me to clarify.

Re: [PATCH] ExtUtils::MakeMaker and world writable files in dists

2008-09-30 Thread Shlomi Fish
On Monday 29 September 2008, Aristotle Pagaltzis wrote: > * Cosimo Streppone <[EMAIL PROTECTED]> [2008-09-29 02:10]: > > but it seems that gnu tar doesn't like the following: > > > > $ tar --mode=0755 cvf blah.tar somedir > > $ tar c --mode=0755 vf blah.tar somedir > > > > and will only accept:

Re: [PATCH] ExtUtils::MakeMaker and world writable files in dists

2008-09-30 Thread Jonathan Rockway
* On Sun, Sep 28 2008, Cosimo Streppone wrote: > Hi! > > I don't know if I really understand the entire > "world-writable files" security hole. > > Anyway, I think the average CPAN author doesn't > really know or care about that, sadly. > See also FWIW, this is true. I have never thought about it