On 12/06/2011 01:37 PM, Jim Meyering wrote:
> I have a few ways to avoid that:
> - change gnupload to set umask 022
> - change gnupload to run chmod go+r on each uploaded file (may not
> always be appropriate?)
> I'd prefer to change gnupload.
Agreed. Either of the two changes I highli
On 12/06/11 12:37, Jim Meyering wrote:
I use a umask of 077.
That is rather irregular
Opinions, preferences, "get over it!" ;-)
gnupload is responsible for delivering the files to GNU in a workable
fashion regardless of your personal preferences. What it ought to really
do is check for go+r
I use a umask of 077.
That is rather irregular (022 is more common), but for a good reason.
It might have saved me from exploit via at least one flaw (the automake
"dist" abuse CVE).
Anyhow, many tools fail to account for the possibility of a restrictive
umask, and gnupload is one of them.
If I'm