Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 7:27 PM, David Cantrell <[EMAIL PROTECTED]> wrote: > If people can point me at some simple tests (sorry, I've not been > following this thread), I can see what these tars do: > NetBSD > FreeBSD > Irix > Solaris > > They all appear to be different - at least, they all res

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Cantrell
On Tue, Sep 23, 2008 at 12:53:33PM -0700, Eric Wilhelm wrote: > There is also still an issue using gnu tar if you run as root. > And are there other tar programs? Unfortunately yes. If people can point me at some simple tests (sorry, I've not been following this thread), I can see what these tar

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 3:53 PM, Eric Wilhelm <[EMAIL PROTECTED]> wrote: > Yeah, sorry. 0. It has a default which is opposite of gnu tar. > >>If it's that easy, I can go patch CPAN.pm right away. Done: CPAN.pm is patched in trunk. > And CPANPLUS I guess. I'm not sure what else happens in > Arch

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread Eric Wilhelm
# from David Golden # on Tuesday 23 September 2008 12:42: >> So, something needs to set $Archive::Tar::CHMOD = 1; to make it >> behave like gnu tar. > >$Archive::Tar::CHMOD = 1 or 0? > >The default is 1.  From the Pod: Yeah, sorry. 0. It has a default which is opposite of gnu tar. >If it's that

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread David Golden
On Tue, Sep 23, 2008 at 3:06 PM, Eric Wilhelm <[EMAIL PROTECTED]> wrote: > So, something needs to set $Archive::Tar::CHMOD = 1; to make it behave > like gnu tar. $Archive::Tar::CHMOD = 1 or 0? The default is 1. From the Pod: By default, Archive::Tar will try to chmod your files to whatever mode

Re: Archive::Tar does not behave like gnu tar

2008-09-23 Thread Eric Wilhelm
# from Shlomi Fish # on Tuesday 23 September 2008 03:00: >[EMAIL PROTECTED] Data-Dump-Streamer-2.08-40]$ ls -l Makefile.PL >-rwxrwxrwx 1 cpan cpan 3792 2006-04-16 18:33 Makefile.PL* Apparently that is using Archive::Tar by way of Archive::Extract (says bingos.) So, something needs to set $Archi

Module::CPANTS::Analyse has_test_pod fails on my module but it has pod tests

2008-09-23 Thread Martin Evans
Hi, I have recently been taking more notice of CPANTS and made some changes to DBD::ODBC to get more "kwalitee". I'm basically getting a fail on has_test_pod (http://cpants.perl.org/dist/kwalitee/DBD-ODBC) which I've duplicated myself with Module::CPANTS::Analyse. However, I have a pod test (

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Jos I. Boumans
On Sep 23, 2008, at 6:30 AM, Andreas J. Koenig wrote: On Mon, 22 Sep 2008 22:37:55 +0200, andreas.koenig. [EMAIL PROTECTED] (Andreas J. Koenig) said: (d) Something else I lean toward PAUSE not indexing them thus pulling the plug as early as possible. And so I have implemented it now. If

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Smylers
Ovid writes: > --- On Tue, 23/9/08, Shlomi Fish <[EMAIL PROTECTED]> wrote: > > > The default Mandriva umask appears to be 0002 . > > That surprised me In general 0002 (aka u=rwx,g=rwx,o=rx) is the right choice of umask on a sytem where each user has their own group -- that is, where the user o

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Andreas J. Koenig
> On Mon, 22 Sep 2008 16:00:41 -0400, "David Golden" <[EMAIL PROTECTED]> > said: > Problem 1: race condition between unarchiving and execution if > Makefile.PL or Build.PL is world writable (ditto test files as well) > (a) Have CPAN and CPANPLUS refuse to run 'perl *.PL' if the PL

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Eric Wilhelm wrote: > # from Ovid > > # on Tuesday 23 September 2008 00:54: > >Of course, even as Eric pointed out, a umask of 0002  still masks the > > world writeable permissions, so I still don't see how you're getting > > there and if you've configured your system

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Ovid wrote: > --- On Tue, 23/9/08, Shlomi Fish <[EMAIL PROTECTED]> wrote: > > The default Mandriva umask appears to be 0002 . > > That surprised me, so I googled "default mandriva umask". All the > references I found say the default umask is 0022 ... unless ... > > Ma

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Andreas J. Koenig
> On Mon, 22 Sep 2008 22:37:55 +0200, [EMAIL PROTECTED] (Andreas J. Koenig) > said: >> (d) Something else > I lean toward PAUSE not indexing them thus pulling the plug as early > as possible. And so I have implemented it now. If it breaks too much in too short time, we could probab

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Eric Wilhelm
# from Ovid # on Tuesday 23 September 2008 00:54: >Of course, even as Eric pointed out, a umask of 0002  still masks the > world writeable permissions, so I still don't see how you're getting > there and if you've configured your system to give *you* a umask of > 0022, then you still shouldn't be

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Ovid
--- On Tue, 23/9/08, Shlomi Fish <[EMAIL PROTECTED]> wrote: > The default Mandriva umask appears to be 0002 . That surprised me, so I googled "default mandriva umask". All the references I found say the default umask is 0022 ... unless ... Mandriva offers a tool to control security settings.

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Shlomi Fish
On Tuesday 23 September 2008, Eric Wilhelm wrote: > # from Shlomi Fish > > # on Monday 22 September 2008 23:55: > >> There would be no "mechanism" because tar respects the umask by > >> default when invoked as a non-root user.  Thus, there are no > >> world-writable files being unpacked from CPAN d

Re: [RFC] Dealing with World-writable Files in the Archive of CPAN Distributions

2008-09-23 Thread Eric Wilhelm
# from Shlomi Fish # on Monday 22 September 2008 23:55: >> There would be no "mechanism" because tar respects the umask by >> default when invoked as a non-root user.  Thus, there are no >> world-writable files being unpacked from CPAN dists on my machine. >> >> Is a umask of 022 not the default s