Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-11-10 07:04:15 +00:00
Code Issues Projects Releases Packages Wiki Activity

Make gems not world writable

Browse source 
Signed-off-by: Jay Mundrawala <jay@thechamberofunderstanding.com>
This commit is contained in:
Jay Mundrawala 2019-01-18 10:50:13 -06:00
parent e6abd1b23e
commit 257c8d7e39
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
habitat/plan.sh
View file

@ -47,6 +47,10 @@ do_install() {
popd popd
wrap_inspec_bin wrap_inspec_bin
# Certain gems (timeliness) are getting installed with world writable files
# This is removing write bits for group and other.
find "$GEM_HOME" -xdev -perm -0002 -type f -print 2>/dev/null | xargs -I '{}' chmod go-w '{}'
} }
# Need to wrap the InSpec binary to ensure paths are correct # Need to wrap the InSpec binary to ensure paths are correct