[arch-general] pacman caches packages with u=rw, g=, o= permissions

[Tinu Weber]

Hi,

On Wed, Jan 19, 2022 at 15:44:30 +0000, u34--- via arch-general wrote:
> I have tried to look into the checkupdates script, but got confused. It 
> looks not long bash script. Does it do the work by copying the system-wide 
> sync databases to a temporary databases, works on those temporary databases, 
> and wiped them before exiting?

No, it downloads a fresh copy of the sync database (the point is, after
all, to have the latest sync database) to a temporary location. The most
interesting part for this is probably +/- around line 100.

It also doesn't wipe it after that. Any subsequent invocations of
checkupdates will reuse that sync DB (assuming $CHECKUPDATES_DB is not
changed and the system isn't rebooted in case it's on a tmpfs), to avoid
unnecessary re-downloading if there are no changes on the mirror.

I personally keep my $CHECKUPDATES_DB in
$XDG_STATE_HOME/pacman/checkupdates, for instance.

Best,
Tinu
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20220119/bcecc581/attachment.sig>