Bug #45815 for ExtUtils-Install: .packlist is not world readable

Thu May 07 07:45:25 2009 dolmen [...] cpan.org - Ticket created

Subject:

.packlist is not world readable

The .packlist files created by EUMM are created with the following permissions on Unix: -rw-r----- (640) When modules are installed/upgraded by root in perl/vendor/site this means that the .packlist are not readable by standard users. Currently (EUMM 6.51_02) 'make install' does not work if it find a non-readable .packlist for the distribution it is installing even if the user wants to install in a separate directory. I'm opening a separate bug for this issue.

Thu May 07 07:56:32 2009 dolmen [...] cpan.org - Correspondence added

I've opened RT45816 for the related issue about blocked 'make install'.

Thu May 07 07:56:33 2009 dolmen [...] cpan.org - Status changed from 'new' to 'open'

Thu May 07 07:57:41 2009 dolmen [...] cpan.org - Reference by ticket #45816 added

Thu May 07 07:58:00 2009 dolmen [...] cpan.org - Reference to ticket #45816 added

Thu May 07 13:46:03 2009 schwern [...] pobox.com - Correspondence added

Subject:	Re: [rt.cpan.org #45815] .packlist is not world readable
Date:	Thu, 07 May 2009 10:45:19 -0700
To:	bug-ExtUtils-MakeMaker [...] rt.cpan.org
From:	Michael G Schwern <schwern [...] pobox.com>

Olivier 'dolmen' Mengué via RT wrote: Show quoted text

> The .packlist files created by EUMM are created with the following > permissions on Unix: -rw-r----- (640)

I don't think MakeMaker or ExtUtils::Install or ExtUtils::Packlist are doing that deliberately. I suspect it's just root's umask. What's root's umask? Show quoted text

> When modules are installed/upgraded by root in perl/vendor/site this > means that the .packlist are not readable by standard users.

That's arguably working as designed if its according to root's umask. Show quoted text

> Currently (EUMM 6.51_02) 'make install' does not work if it find a > non-readable .packlist for the distribution it is installing even if the > user wants to install in a separate directory. I'm opening a separate > bug for this issue.

That part is a bug. -- 52. Not allowed to yell "Take that Cobra" at the rifle range. -- The 213 Things Skippy Is No Longer Allowed To Do In The U.S. Army http://skippyslist.com/list/

Thu May 07 14:05:02 2009 dolmen [...] cpan.org - Correspondence added

Le Jeu. Mai. 07 13:46:03 2009, schwern@pobox.com a écrit : Show quoted text

> I don't think MakeMaker or ExtUtils::Install or ExtUtils::Packlist are

doing Show quoted text

> that deliberately.

I agree. Show quoted text

> I suspect it's just root's umask. What's root's umask?

I don't know the root's umask at the time the files were created on this machine. But the usual root's umask is 022. The permissions should be the same as for .pm files : 444 Show quoted text

> > When modules are installed/upgraded by root in perl/vendor/site this > > means that the .packlist are not readable by standard users.

> > That's arguably working as designed if its according to root's umask.

I wonder what is packlist usage. Is it just the file list for uninstall? Show quoted text

> > Currently (EUMM 6.51_02) 'make install' does not work if it find a > > non-readable .packlist for the distribution it is installing even if the > > user wants to install in a separate directory. I'm opening a separate > > bug for this issue.

> > That part is a bug.

This part too. The packlist contains useful information for a non-root Perl developer like me that has to give instructions to his sysadmin.

Thu May 07 14:44:48 2009 schwern [...] pobox.com - Correspondence added

Subject:	Re: [rt.cpan.org #45815] .packlist is not world readable
Date:	Thu, 07 May 2009 11:44:26 -0700
To:	bug-ExtUtils-MakeMaker [...] rt.cpan.org
From:	Michael G Schwern <schwern [...] pobox.com>

Olivier 'dolmen' Mengué via RT wrote: Show quoted text

>> I suspect it's just root's umask. What's root's umask?

> > I don't know the root's umask at the time the files were created on this > machine. > But the usual root's umask is 022. > > The permissions should be the same as for .pm files : 444

My packlists are 0644. Not sure what the difference is then between your system and mine. I still suspect its a umask issue. Are all your packlists 0640? Show quoted text

>>> When modules are installed/upgraded by root in perl/vendor/site this >>> means that the .packlist are not readable by standard users.

>> That's arguably working as designed if its according to root's umask.

> > I wonder what is packlist usage. Is it just the file list for uninstall?

Yes. It's supposed to be a registry of installed files but it's fairly unreliable. Because of the way its stored you can easily get multiple distributions writing to the same packlist and no ability to untangle them. That's why uninstall is disabled. You're also only able to uninstall if you already have the source which isn't all that useful. We've never built anything to replace it. Show quoted text

>>> Currently (EUMM 6.51_02) 'make install' does not work if it find a >>> non-readable .packlist for the distribution it is installing even if the >>> user wants to install in a separate directory. I'm opening a separate >>> bug for this issue.

>> That part is a bug.

> > This part too. The packlist contains useful information for a non-root > Perl developer like me that has to give instructions to his sysadmin.

Ideally, its up to the sysadmin to decide what you get to see. I'm still running on the assumption that this is a local permissions issue and not a MakeMaker one. I'm kicking this over into the ExtUtils::Install queue because that's what really has control over the packlist. -- 101. I am not allowed to mount a bayonet on a crew-served weapon. -- The 213 Things Skippy Is No Longer Allowed To Do In The U.S. Army http://skippyslist.com/list/

Thu May 07 14:44:50 2009 mschwern [...] cpan.org - Queue changed from ExtUtils-MakeMaker to ExtUtils-Install

Thu May 07 14:45:35 2009 mschwern [...] cpan.org - Correspondence added

Yves, this looks like it falls inside EUI's domain.