[ 
https://issues.apache.org/jira/browse/MNG-7656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17653396#comment-17653396
 ] 

Michael Osipov commented on MNG-7656:
-------------------------------------

Here is the problem:

{noformat}
commit 35611879c6b5530b3bfaed6639fdd5cf696d77bd
Author: Tamas Cservenak <[email protected]>
Date:   2022-11-18 11:24:14 +0100

    [MRESOLVER-269] FileProcessor.write( File, InputStream ) is defunct (#222)

    The `FileProcessor.write( File, InputStream )` method  is completely 
broken, it always fails. This method is used ONLY when FileTransformer is 
present. Result of plain oversight and not being covered by tests.

    ---
    https://issues.apache.org/jira/browse/MRESOLVER-296

{noformat}

This operates on temp files and the atomically moves to the target file on the 
same volume. Temp files have by default {{0600}} mode.

> Dependencies copied to target have stricter permissions
> -------------------------------------------------------
>
>                 Key: MNG-7656
>                 URL: https://issues.apache.org/jira/browse/MNG-7656
>             Project: Maven
>          Issue Type: Bug
>    Affects Versions: 4.0.0-alpha-3
>            Reporter: Moshe Elisha
>            Priority: Minor
>             Fix For: waiting-for-feedback
>
>         Attachments: maven.log
>
>
> Dependency JARs that were copied duringĀ "clean install" to target have read 
> and write permissions only to the user/owner and no permissions at all to the 
> group and others.("-rw-------")
> Not sure if the issue is when maven downloads the JARs from the repo or when 
> the JARs are copied from the repo to the target (using 
> "dependency:3.4.0:copy-dependencies")



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to