Possible security hole when deploying site
------------------------------------------

         Key: MSITE-141
         URL: http://jira.codehaus.org/browse/MSITE-141
     Project: Maven 2.x Site Plugin
        Type: Bug

    Versions: 2.0-beta-5    
 Environment: Linux gentoo 2.6.16 64bit, maven 2.0.2
    Reporter: Martin Vysny
    Priority: Critical


When the site is deployed into a directory /foo/bar, the following command is 
issued over a ssh:
chmod -Rf g+w /foo/bar/
it was intended to use g+r I presume? :-)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to