Project

General

Profile

Bug #1921

file permissions in lighttpd-1.4.21.tar.gz

Added by rythie over 10 years ago. Updated over 10 years ago.

Status:
Invalid
Priority:
Normal
Assignee:
-
Category:
build_autotools
Target version:
Start date:
2009-02-26
Due date:
% Done:

0%

Estimated time:
Missing in 1.5.x:

Description

If I untar lighttpd-1.4.21.tar.gz as root, I notice that the top level directory has world write permission on it by default.

This I think, could allow users on a shared system to corrupt the source before it is installed.

History

#1

Updated by darix over 10 years ago

  • Status changed from New to Invalid

please file a bug on autotools at the gnu website. they do this on purpose for some unknown reason in "make dist".

and building as root is not adviced. build as normal user and run only make install as root.

Also available in: Atom