Wang1rrr opened a new issue, #7006: URL: https://github.com/apache/rocketmq-dashboard/issues/7006
### Description The JAR legal-material packaging step replaces the original artifact with a `NamedTemporaryFile`. On POSIX, that temporary file has mode `0600`. The replacement keeps that mode, so packaging changes an ordinary readable `0644` JAR into an owner-only file. This prevents a separate service account from reading an artifact built by another account. A deliberately group-readable `0640` artifact also loses its group read bit. ### Reproduction 1. Create a valid fixture Spring Boot JAR and set its mode to `0644` (or `0640` / `0755`). 2. Run `legal.package_jar`. 3. Inspect `stat.S_IMODE(jar.stat().st_mode)`: it is `0600` for all three inputs. ### Expected behavior Preserve the input artifact's permission bits when replacing it with the verified archive. Existing gate failures should still leave the original JAR in place. The reproduction uses a real Linux temporary filesystem; Windows bind-mount permission emulation is excluded. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
