Subject: | Test-Warn's Archive contains world-writable files. |
The Test-Warn tar.gz only contains world-writable files:
{{{{{{{{{{{{
shlomi:~$ tar -tvf Test-Warn-0.11.tar.gz
drwxrwxrwx 0/0 0 2008-07-09 14:01 Test-Warn-0.11/
-rw-rw-rw- 0/0 2140 2008-07-09 12:52 Test-Warn-0.11/Changes
-rw-rw-rw- 0/0 1030 2008-05-31 16:01 Test-Warn-0.11/Makefile.PL
-rw-rw-rw- 0/0 216 2007-03-15 23:16 Test-Warn-0.11/MANIFEST
-rw-rw-rw- 0/0 736 2008-07-09 14:01 Test-Warn-0.11/META.yml
-rw-rw-rw- 0/0 2148 2007-04-30 19:09 Test-Warn-0.11/README
drwxrwxrwx 0/0 0 2008-07-09 14:01 Test-Warn-0.11/t/
-rw-rw-rw- 0/0 498 2002-07-05 09:14 Test-Warn-0.11/t/1.t
-rw-rw-rw- 0/0 2094 2007-03-02 01:31 Test-Warn-0.11/t/carped.t
-rw-rw-rw- 0/0 146 2007-03-06 02:15 Test-Warn-0.11/t/pod.t
-rw-rw-rw- 0/0 3597 2002-07-31 09:06
Test-Warn-0.11/t/warnings_are.t
-rw-rw-rw- 0/0 3773 2002-07-31 09:06
Test-Warn-0.11/t/warnings_like.t
-rw-rw-rw- 0/0 3184 2003-09-02 09:56
Test-Warn-0.11/t/warning_is.t
-rw-rw-rw- 0/0 3425 2002-07-31 09:06
Test-Warn-0.11/t/warning_like.t
-rw-rw-rw- 0/0 14918 2008-07-09 12:48 Test-Warn-0.11/Warn.pm
}}}}}}}}}}}}
As a result, anyone can write to them and Mandriva's msec warns about them.
Regards,
-- Shlomi Fish