slachiewicz opened a new pull request, #1844:
URL: https://github.com/apache/maven-mvnd/pull/1844

   On POSIX file systems `registry.bin` is now created `0600`, and a registry 
directory that mvnd creates is `0700`. An existing `registry.bin` is narrowed 
to `0600` on first use, and a registry file that is a symlink or is owned by 
another user is refused. Windows is unchanged.
   
   One behaviour change: `sudo mvnd` that keeps the caller's `HOME` now fails, 
instead of writing root's daemons into that user's registry.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to