workbench
workbench copied to clipboard
workbench-linux64-v1.5.0.zip has too-generous permissions for files and directories
Permissions across all files and directories in the zipfile are u=rwx,g=rwx,o=rwx. This is bad if this package is unpacked by an admin intending to install into a privileged location, as any user can write to the directories, and modify or delete files.
In addition, non-executable files should not be +x.
Thanks for bringing this up. The permissions should be improved in the next release.
2 years later and I'm back because I went install workbench on another computer found the bug, and decided to report it. Turns out I already did 🤷🏻
We didn't change the permissions in the existing release zip, but we did change it on the folders that get zipped to make them. It has been longer than expected for us to put out a new release since then.