Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File permissions leak content to world #12

Open
Werkov opened this issue Nov 16, 2016 · 0 comments
Open

File permissions leak content to world #12

Werkov opened this issue Nov 16, 2016 · 0 comments
Assignees
Labels

Comments

@Werkov
Copy link
Member

Werkov commented Nov 16, 2016

Despite astrid explicitly sets umask 0x007, some files are created with 644 permissions. Those are perhaps created by forked processes (probably git) that don't honor/override the umask.
This has two negative impacts:

  • files are write readable -- broken separation,
  • files are group nonwritable -- broken automatic builds (should they overwrite such file).

Proposed solution:
Astrid should chmod after git operations,

Related: #11.

@Werkov Werkov added the bug label Nov 16, 2016
@Werkov Werkov self-assigned this Nov 23, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant