You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Tamas Cservenak (Jira)" <ji...@apache.org> on 2023/01/05 18:29:00 UTC

[jira] [Created] (MRESOLVER-313) Artifact file permissions are 0600 and not implicitly set by umask

Tamas Cservenak created MRESOLVER-313:
-----------------------------------------

             Summary: Artifact file permissions are 0600 and not implicitly set by umask
                 Key: MRESOLVER-313
                 URL: https://issues.apache.org/jira/browse/MRESOLVER-313
             Project: Maven Resolver
          Issue Type: Bug
          Components: Resolver
            Reporter: Tamas Cservenak
             Fix For: 1.9.4


With introduction of FileUtils, and widespread use of CollocatedTempFile, one problem occurs: in both "temp file" cases Files.createTempFile is being used, that uses 0600 permissions instead to rely on umask.

In case of TempFile this is OK, but in case of CollocatedTempFile this is NOT OK, as these files are usually moved to their "final" place (like artifact in local repo once downloaded and verified).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)