Re: restrictive umask vs gnupload

2011-12-06 Thread Eric Blake
On 12/06/2011 01:37 PM, Jim Meyering wrote: > I have a few ways to avoid that: > - change gnupload to set umask 022 > - change gnupload to run chmod go+r on each uploaded file (may not > always be appropriate?) > I'd prefer to change gnupload. Agreed. Either of the two changes I highli

Re: restrictive umask vs gnupload

2011-12-06 Thread Bruce Korb
On 12/06/11 12:37, Jim Meyering wrote: I use a umask of 077. That is rather irregular Opinions, preferences, "get over it!" ;-) gnupload is responsible for delivering the files to GNU in a workable fashion regardless of your personal preferences. What it ought to really do is check for go+r

restrictive umask vs gnupload

2011-12-06 Thread Jim Meyering
I use a umask of 077. That is rather irregular (022 is more common), but for a good reason. It might have saved me from exploit via at least one flaw (the automake "dist" abuse CVE). Anyhow, many tools fail to account for the possibility of a restrictive umask, and gnupload is one of them. If I'm