lkml.org 
[lkml]   [2006]   [Jun]   [26]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateMon, 26 Jun 2006 02:11:40 -0500
FromTroy Benjegerdes <>
SubjectRe: Kernelsources writeable for everyone?!
On Sat, Jun 24, 2006 at 07:17:02PM +0100, Al Viro wrote:
> On Sat, Jun 24, 2006 at 08:00:50PM +0200, Daniel wrote:
> > Hi,
> > may be this was reported/asked 999999999 times, but here ist the 1000000000th:
> > 
> > I have downloaded linux-2.6.17.1 10 min ago and I noticed that every file is 
> > writeable by everyone. What's going on there?
> 
> You are unpacking tarballs as root and preserve ownership and permissions.
> Don't.

While it is true that users generally shouldn't be unpacking tarballs as root,
It seems rather monumentally stupid for a trusted source for a critical
system component (aka, kernel.org) to be distributing tarballs like
this.

How hard is it really to make the git tarball export script set sane
owner (root) and permissions (644/755) on files and directories?
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-06-26 09:14    [from the cache]
©2003-2008