Project

General

Profile

Actions

Bug #1921

closed

file permissions in lighttpd-1.4.21.tar.gz

Added by rythie about 15 years ago. Updated about 15 years ago.

Status:
Invalid
Priority:
Normal
Category:
build_autotools
Target version:
ASK QUESTIONS IN Forums:

Description

If I untar lighttpd-1.4.21.tar.gz as root, I notice that the top level directory has world write permission on it by default.

This I think, could allow users on a shared system to corrupt the source before it is installed.

Actions #1

Updated by darix about 15 years ago

  • Status changed from New to Invalid

please file a bug on autotools at the gnu website. they do this on purpose for some unknown reason in "make dist".

and building as root is not adviced. build as normal user and run only make install as root.

Actions

Also available in: Atom