[arch-commits] Commit in gnomon/trunk (PKGBUILD)

[Jelle van der Waa]

    Date: Saturday, February 6, 2021 @ 17:03:18
  Author: jelle
Revision: 846917

Fix package files owned by builduser:builduser

chown the files to be owned by root, so a user cannot modidy the packaged files.

Modified:
  gnomon/trunk/PKGBUILD

----------+
 PKGBUILD |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2021-02-06 17:01:26 UTC (rev 846916)
+++ PKGBUILD	2021-02-06 17:03:18 UTC (rev 846917)
@@ -2,7 +2,7 @@
 
 pkgname=gnomon
 pkgver=1.5.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Utility to annotate console logging statements with timestamps and find slow processes"
 arch=('any')
 url="https://github.com/paypal/gnomon"
@@ -19,8 +19,8 @@
   # Experimental dedup
   rm -r "$pkgdir"/usr/lib/node_modules/$pkgname/node_modules/semver
 
-  # Why 777? :/
-  chmod -R u=rwX,go=rX "$pkgdir"
+  # npm gives ownership of ALL FILES to build user
+  chown -R root:root "${pkgdir}"
 }
 
 # vim:set ts=2 sw=2 et: