[pacman-dev] [PATCH] makepkg: only strip files that are writable
Allan McRae
allan at archlinux.org
Tue Feb 2 19:42:55 EST 2010
On 03/02/10 03:02, Thomas Bächler wrote:
> Am 27.01.2010 00:24, schrieb Allan McRae:
>>> - would anyone want to strip everything regardless of their
>>> permissions (and running strip as root for that reason) ?
>>
>> I have no idea why libraries/binaries are installed without 644/755
>> permissions anyway. Configuration files I understand... That said, the
>> do get installed that way and so this needs dealt with.
>
> I have seen cases where applications require certain helper applications
> or plugins to be 555 or 500, so not writable by anyone (for security
> reasons, but I don't remember exactly where I saw this).
>
> Instead of not stripping them at all, wouldn't it be desirable to make
> them writable, strip them and remove the writable permissions again?
>
Sure, consider that a stage 2. For this stage I just want to avoid the
error trap that should (untested) be set off in these cases.
Allan
More information about the pacman-dev
mailing list