New submission from richard:

since 0.7.x, there are some issues in the tarball setuptools.egg-info 
directory...namely,
1. the file protection of the files is group/world writeable (should be 
group/world read-only)
2. there are additional .orig files
3. there is an additional directory EGG-INFO containing an obsolete copy of 
PKG-INFO.

This should be trivial to fix in the source tree.  extract below from the 0.8 
tarball:
drwxrwxrwx 0/0               0 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/
-rw-rw-rw- 0/0             654 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/dependency_links.txt
drwxrwxrwx 0/0               0 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/EGG-INFO/
-rw-rw-rw- 0/0             153 2013-07-02 17:30 
setuptools-0.8/setuptools.egg-info/EGG-INFO/PKG-INFO
-rw-rw-rw- 0/0            2773 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/entry_points.txt
-rw-rw-rw- 0/0            2773 2013-07-03 14:12 
setuptools-0.8/setuptools.egg-info/entry_points.txt.orig
-rw-rw-rw- 0/0           45823 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/PKG-INFO
-rw-rw-rw- 0/0             186 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/requires.txt
-rw-rw-rw- 0/0             186 2013-07-03 14:12 
setuptools-0.8/setuptools.egg-info/requires.txt.orig
-rw-rw-rw- 0/0            3663 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/SOURCES.txt
-rw-rw-rw- 0/0              49 2013-07-05 19:12 
setuptools-0.8/setuptools.egg-info/top_level.txt
-rw-rw-rw- 0/0               2 2013-07-02 17:48 
setuptools-0.8/setuptools.egg-info/zip-safe

----------
messages: 737
nosy: richard
priority: bug
status: unread
title: file protection group/world writeable on egg-info files since 0.7x

_______________________________________________
Setuptools tracker <setupto...@bugs.python.org>
<http://bugs.python.org/setuptools/issue154>
_______________________________________________
_______________________________________________
Distutils-SIG maillist  -  Distutils-SIG@python.org
http://mail.python.org/mailman/listinfo/distutils-sig

Reply via email to