| Subject: | FindBin-Real-1.05.tar.gz Contains World-Writable files |
As one can see here:
<<<
shlomi:~$ tar -tvf FindBin-Real-1.05.tar.gz
drwxrwxrwx user/group 0 2007-02-04 02:01 FindBin-Real-1.05/
-rw-rw-rw- user/group 657 2007-02-04 01:51 FindBin-Real-1.05/CHANGES
-rw-rw-rw- user/group 312 2007-02-04 01:36
FindBin-Real-1.05/Makefile.PL
-rw-rw-rw- user/group 214 2007-02-04 01:37 FindBin-Real-1.05/MANIFEST
-rw-rw-rw- user/group 424 2007-02-04 02:01 FindBin-Real-1.05/META.yml
-rw-rw-rw- user/group 2672 2007-02-04 02:00 FindBin-Real-1.05/README
-rw-rw-rw- user/group 7209 2007-02-04 01:57 FindBin-Real-1.05/Real.pm
drwxrwxrwx user/group 0 2007-02-04 02:01 FindBin-Real-1.05/t/
-rw-rw-rw- user/group 115 2003-08-11 15:17 FindBin-Real-1.05/t/t1.t
-rw-rw-rw- user/group 168 2003-08-11 15:17 FindBin-Real-1.05/t/t2.t
-rw-rw-rw- user/group 180 2005-02-07 15:30 FindBin-Real-1.05/t/t3.t
-rw-rw-rw- user/group 177 2005-02-07 15:30 FindBin-Real-1.05/t/t4.t
-rw-rw-rw- user/group 189 2005-02-07 15:30 FindBin-Real-1.05/t/t5.t
-rw-rw-rw- user/group 318 2004-02-15 13:58 FindBin-Real-1.05/t/t6.t
-rw-rw-rw- user/group 168 2005-02-07 15:32 FindBin-Real-1.05/t/t7.t
-rw-rw-rw- user/group 180 2005-02-07 15:32 FindBin-Real-1.05/t/t8.t
-rw-rw-rw- user/group 385 2007-02-04 01:30 FindBin-Real-1.05/t/tpod.t
-rw-rw-rw- user/group 528 2007-02-04 02:00 FindBin-Real-1.05/t/tpodc.t
shlomi:~$
Show quoted text
>>>
FindBin-Real-1.05 contains world-writable files. This facilitates
exploiting the build process, and also causes world-writable files to be
installed after installation (in case I'm using CPANPLUS-Dist-Mdv.).
Please correct it.
Regards,
-- Shlomi Fish