[Distutils] [issue154] file protection group/world writeable on egg-info files since 0.7x

richard setuptools at bugs.python.org
Sun Jul 14 17:10:31 CEST 2013


New submission from richard:

since 0.7.x, there are some issues in the tarball setuptools.egg-info directory...namely,
1. the file protection of the files is group/world writeable (should be group/world read-only)
2. there are additional .orig files
3. there is an additional directory EGG-INFO containing an obsolete copy of PKG-INFO.

This should be trivial to fix in the source tree.  extract below from the 0.8 tarball:
drwxrwxrwx 0/0               0 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/
-rw-rw-rw- 0/0             654 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/dependency_links.txt
drwxrwxrwx 0/0               0 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/EGG-INFO/
-rw-rw-rw- 0/0             153 2013-07-02 17:30 setuptools-0.8/setuptools.egg-info/EGG-INFO/PKG-INFO
-rw-rw-rw- 0/0            2773 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/entry_points.txt
-rw-rw-rw- 0/0            2773 2013-07-03 14:12 setuptools-0.8/setuptools.egg-info/entry_points.txt.orig
-rw-rw-rw- 0/0           45823 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/PKG-INFO
-rw-rw-rw- 0/0             186 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/requires.txt
-rw-rw-rw- 0/0             186 2013-07-03 14:12 setuptools-0.8/setuptools.egg-info/requires.txt.orig
-rw-rw-rw- 0/0            3663 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/SOURCES.txt
-rw-rw-rw- 0/0              49 2013-07-05 19:12 setuptools-0.8/setuptools.egg-info/top_level.txt
-rw-rw-rw- 0/0               2 2013-07-02 17:48 setuptools-0.8/setuptools.egg-info/zip-safe

----------
messages: 737
nosy: richard
priority: bug
status: unread
title: file protection group/world writeable on egg-info files since 0.7x

_______________________________________________
Setuptools tracker <setuptools at bugs.python.org>
<http://bugs.python.org/setuptools/issue154>
_______________________________________________


More information about the Distutils-SIG mailing list