mirror of
https://github.com/inspec/inspec
synced 2024-11-22 12:43:07 +00:00
Make gems not world writable
Signed-off-by: Jay Mundrawala <jay@thechamberofunderstanding.com>
This commit is contained in:
parent
e6abd1b23e
commit
257c8d7e39
1 changed files with 4 additions and 0 deletions
|
@ -47,6 +47,10 @@ do_install() {
|
|||
popd
|
||||
|
||||
wrap_inspec_bin
|
||||
|
||||
# Certain gems (timeliness) are getting installed with world writable files
|
||||
# This is removing write bits for group and other.
|
||||
find "$GEM_HOME" -xdev -perm -0002 -type f -print 2>/dev/null | xargs -I '{}' chmod go-w '{}'
|
||||
}
|
||||
|
||||
# Need to wrap the InSpec binary to ensure paths are correct
|
||||
|
|
Loading…
Reference in a new issue