(Please CC me in the replies as I'm not subscribed)

Hello list,

examing the tarballs generated by "make dist" using "tar -tzvvf", it seems that information about group/owner of the buildsystem is being leaked. Example output - notice the jenkins/jenkins field:

# tar -tzvvf core/cfengine-3.7.0a1.5ffcc54.tar.gz   | head
drwxrwxr-x jenkins/jenkins   0 2015-01-16 02:54:12 cfengine-3.7.0a1.5ffcc54/
-rw-rw-r-- jenkins/jenkins 34036 2015-01-16 02:53:55 
cfengine-3.7.0a1.5ffcc54/Makefile.in
-rwxrwxr-x jenkins/jenkins 658314 2015-01-16 02:53:51 
cfengine-3.7.0a1.5ffcc54/configure
-rw-rw-r-- jenkins/jenkins   4973 2014-10-27 14:39:26 
cfengine-3.7.0a1.5ffcc54/Makefile.am

My workaround is to add the following in Makefile.am:

TAR_OPTIONS = --owner=0 --group=0
export TAR_OPTIONS

I expected that something like this would be the default though.


Thanks,
Dimitris




Reply via email to