-
Notifications
You must be signed in to change notification settings - Fork 7
Open
Description
The currently published gem has the following file permissions:
[user@localhost paggio]$ tar -tvf data.tar.gz
-rw------- wheel/wheel 116 2015-12-11 19:40 .travis.yml
-rw------- wheel/wheel 62 2015-12-11 19:40 Gemfile
-rw------- wheel/wheel 416 2015-12-11 19:40 Gemfile.lock
-rw------- wheel/wheel 3246 2015-12-11 19:40 README.md
-rw------- wheel/wheel 179 2015-12-11 19:40 Rakefile
-rw------- wheel/wheel 877 2015-12-11 19:40 lib/paggio.rb
-rw------- wheel/wheel 2351 2015-12-11 19:40 lib/paggio/css.rb
-rw------- wheel/wheel 1016 2015-12-11 19:40 lib/paggio/css/animation.rb
-rw------- wheel/wheel 725 2015-12-11 19:40 lib/paggio/css/color.rb
-rw------- wheel/wheel 7392 2015-12-11 19:40 lib/paggio/css/definition.rb
-rw------- wheel/wheel 576 2015-12-11 19:40 lib/paggio/css/font.rb
-rw------- wheel/wheel 604 2015-12-11 19:40 lib/paggio/css/rule.rb
-rw------- wheel/wheel 4184 2015-12-11 19:40 lib/paggio/css/unit.rb
-rw------- wheel/wheel 4201 2015-12-11 19:40 lib/paggio/formatter.rb
-rw------- wheel/wheel 1824 2015-12-11 19:40 lib/paggio/html.rb
-rw------- wheel/wheel 2611 2015-12-11 19:40 lib/paggio/html/element.rb
-rw------- wheel/wheel 781 2015-12-11 19:40 lib/paggio/html/element/a.rb
-rw------- wheel/wheel 555 2015-12-11 19:40 lib/paggio/html/element/base.rb
-rw------- wheel/wheel 469 2015-12-11 19:40 lib/paggio/html/element/blockquote.rb
-rw------- wheel/wheel 733 2015-12-11 19:40 lib/paggio/html/element/button.rb
-rw------- wheel/wheel 541 2015-12-11 19:40 lib/paggio/html/element/canvas.rb
-rw------- wheel/wheel 554 2015-12-11 19:40 lib/paggio/html/element/embed.rb
-rw------- wheel/wheel 695 2015-12-11 19:40 lib/paggio/html/element/img.rb
-rw------- wheel/wheel 715 2015-12-11 19:40 lib/paggio/html/element/input.rb
-rw------- wheel/wheel 368 2015-12-11 19:40 lib/paggio/html/element/link.rb
-rw------- wheel/wheel 588 2015-12-11 19:40 lib/paggio/html/element/object.rb
-rw------- wheel/wheel 548 2015-12-11 19:40 lib/paggio/html/element/optgroup.rb
-rw------- wheel/wheel 546 2015-12-11 19:40 lib/paggio/html/element/option.rb
-rw------- wheel/wheel 586 2015-12-11 19:40 lib/paggio/html/element/select.rb
-rw------- wheel/wheel 624 2015-12-11 19:40 lib/paggio/html/element/td.rb
-rw------- wheel/wheel 659 2015-12-11 19:40 lib/paggio/html/helpers.rb
-rw------- wheel/wheel 550 2015-12-11 19:40 lib/paggio/markdown.rb
-rw------- wheel/wheel 478 2015-12-11 19:40 lib/paggio/now.rb
-rw------- wheel/wheel 885 2015-12-11 19:40 lib/paggio/script.rb
-rw------- wheel/wheel 865 2015-12-11 19:40 lib/paggio/utils.rb
-rw------- wheel/wheel 506 2015-12-11 19:40 paggio.gemspec
-rw------- wheel/wheel 1289 2015-12-11 19:40 spec/css_spec.rb
-rw------- wheel/wheel 3496 2015-12-11 19:40 spec/html_spec.rb
[user@localhost paggio]$
Ie. 0600, which is at least non-standard. Please ensure that the next release has 0644, as this causes some unnecessary issues, because sudo gem install paggio
writes those files with the specified permissions and user needs to correct those to access things to access it with an unprivileged user. (Now that I think about it, it kind of sounds like a possibly security issue for gem on multi-user systems...)
Metadata
Metadata
Assignees
Labels
No labels