Joseph Walton created MASSEMBLY-595:
---------------------------------------

             Summary: Tar file contains world-writeable files when fileSets 
with and without fileMode are mixed
                 Key: MASSEMBLY-595
                 URL: https://jira.codehaus.org/browse/MASSEMBLY-595
             Project: Maven 2.x Assembly Plugin
          Issue Type: Bug
    Affects Versions: 2.2.2
            Reporter: Joseph Walton


I have an assembly descriptor with some fileSets that do and some that don't 
set the fileMode. Any resources after fileMode has been set end up with 
world-writable permissions.

This assembly descriptor:
{code}
<assembly>
  <id>dist</id>
  <formats>
    <format>tar.gz</format>
  </formats>

  <fileSets>
    <fileSet>
      <directory>src/main/files</directory>
      <outputDirectory>a</outputDirectory>
    </fileSet>

    <fileSet>
      <directory>src/main/files</directory>
      <outputDirectory>b</outputDirectory>
      <fileMode>0744</fileMode>
    </fileSet>

    <fileSet>
      <directory>src/main/files</directory>
      <outputDirectory>c</outputDirectory>
    </fileSet>
  </fileSets>
</assembly>
{code}

gives:
{code}
$ tar tvvf target/test-1-SNAPSHOT-dist.tar.gz
drwxr-xr-x jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/a/
-rw-r--r-- jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/a/empty-file
drwxrwxrwx jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/b/
-rwxr--r-- jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/b/empty-file
drwxrwxrwx jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/c/
-rwxrwxrwx jwalton/jwalton   0 2012-01-05 18:55 test-1-SNAPSHOT/c/empty-file
{code}

The third copy of the fileSet, with no {{fileMode}} set, is now world-writable, 
unlike the first. The second directory, with no {{directoryMode}} specified, 
has the same problem.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to