Hi!

please change your files to mod 640 which means rw-r-----
I do not know why you are setting the executable bit.

Is this security relevant?

Comments

mlsamuelson’s picture

mlsamuelson commented

Hi Waldmeister!

Thanks for bringing this to my attention. I don't know how that happened. Best I can think is that at one point I swapped files between XP and Linux, so maybe things became confused there.

I wonder if you or anyone else knows how to commit permission changes to CVS? My attempt to do so doesn't seem to have had any results.

mlsamuelson

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Status: Active » Postponed (maintainer needs more info)

@waldmeister - which files have the execute bit?

I believe that the security packaging script sets all files to be 644 and all directories to be 755 by default before the files are inserted into the tar.gz.

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

@mlsamuelson - here is the core packager issue that was fuzzing my memory http://drupal.org/node/116431

It seems that it actually wasn't committed.

I guess that if you want you could try to fix the markitup.admin.inc fle which is "user" executable.

-rwxr-xr-x 1 greg greg 9307 2008-08-07 19:05 markitup.admin.inc

I don't see how this is really a problem, per se.

Garrett Albright’s picture

Garrett Albright commented
Status: Postponed (maintainer needs more info) » Fixed

All the permissions look kosher at this point, so I'm going to go ahead and close this.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.