[Vtigercrm-developers] vtiger CRM 5.3.0 RC tarball packaging issue

Alan Lord (News) alanslists at gmail.com
Thu Oct 27 00:20:50 PDT 2011


On 26/10/11 19:59, Asha wrote:

> *vtiger CRM 5.3.0 RC downloads:*
> vtiger CRM Source – vtiger CRM 5.3.0 – RC.tar.gz

I just extracted the RC tarball and all files *and* directories are 
rwxrwxrwx.

This is very poor security practice - there are very few files (if any) 
that will need to be writeable or executable, especially by "other", and 
only a couple of directories need to be writeable.

Unless this is me (I just did the same command I always do: tar xvf 
file.tar.gz) this needs to be fixed before release.

Cheers

Al

-- 
The Open Learning Centre
http://www.theopenlearningcentre.com




More information about the vtigercrm-developers mailing list