[ 
https://jira.codehaus.org/browse/MASSEMBLY-580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=287535#comment-287535
 ] 

Antonio GarcĂ­a commented on MASSEMBLY-580:
------------------------------------------

I have experienced the same regression with 2.2.1 and 2.2.2. 2.2-beta-2 and 
2.2-beta-3 do not have this problem. It seems that the regression first 
appeared with 2.2-beta-4.
                
> dependencySet ignores directoryMode descriptor
> ----------------------------------------------
>
>                 Key: MASSEMBLY-580
>                 URL: https://jira.codehaus.org/browse/MASSEMBLY-580
>             Project: Maven 2.x Assembly Plugin
>          Issue Type: Bug
>    Affects Versions: 2.2.1
>            Reporter: Johno Crawford
>         Attachments: directoryModeIgnored.zip
>
>
> Despite having set the directoryMode for the dependencySet the permissions 
> are ignored and the folder is set to 777 which poses as a possible security 
> risk. Please find attached project which can be used to create the test zip 
> containing the folder with incorrect permissions.
> $ unzip project-deploy.zip
> Archive:  project-deploy.zip
>    creating: webapps/
>   inflating: webapps/commons-fileupload.jar
> $ ls -lah
> total 92K
> drwxr-xr-x 4 johno sulake 4.0K Oct 27 20:26 .
> drwxr-xr-x 4 johno sulake 4.0K Oct 27 20:25 ..
> drwxr-xr-x 2 johno sulake 4.0K Oct 27 20:25 archive-tmp
> -rw-r--r-- 1 johno sulake  51K Oct 27 20:25 project-deploy.zip
> drwxrwxrwx 2 johno sulake 4.0K Oct 27 20:25 webapps
> Thanks in advance!

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to