[arch-commits] Commit in browserify/trunk (PKGBUILD)

[Felix Yan]

    Date: Friday, January 3, 2020 @ 15:00:52
  Author: felixonmars
Revision: 547625

upgpkg: browserify 16.5.0-2

fix broken permissions

Modified:
  browserify/trunk/PKGBUILD

----------+
 PKGBUILD |   11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2020-01-03 15:00:29 UTC (rev 547624)
+++ PKGBUILD	2020-01-03 15:00:52 UTC (rev 547625)
@@ -3,7 +3,7 @@
 pkgname=browserify
 pkgdesc='browser-side require() the node way'
 pkgver=16.5.0
-pkgrel=1
+pkgrel=2
 arch=('any')
 url='http://browserify.org/'
 license=('MIT' 'BSD')
@@ -25,6 +25,11 @@
     rm -r $dep;
   done
 
-  # Fix npm security derp
-  find "$pkgdir/usr" -type d -exec chmod 755 '{}' +
+  # Non-deterministic race in npm gives 777 permissions to random directories.
+  # See https://github.com/npm/npm/issues/9359 for details.
+  chmod -R u=rwX,go=rX "$pkgdir"
+
+  # npm installs package.json owned by build user
+  # https://bugs.archlinux.org/task/63396
+  chown -R root:root "$pkgdir"
 }