TinyTemplate icon indicating copy to clipboard operation
TinyTemplate copied to clipboard

distributed crate has source files marked as executable

Open dkg opened this issue 4 years ago • 0 comments

the distributed crate for tinytemplate appears to have almost all files marked as executable:

$ wget -O - -q 'https://crates.io/api/v1/crates/tinytemplate/1.2.1/download' | tar tvz
-rwxrwxrwx 1000/1000      1249 2021-01-03 14:00 tinytemplate-1.2.1/.github/workflows/ci.yml
-rwxrwxrwx 1000/1000        30 2019-01-26 09:01 tinytemplate-1.2.1/.gitignore
-rwxrwxrwx 1000/1000      1912 2021-03-03 18:56 tinytemplate-1.2.1/CHANGELOG.md
-rwxrwxrwx 1000/1000      2629 2019-01-26 09:01 tinytemplate-1.2.1/CONTRIBUTING.md
-rwxrwxrwx 1000/1000       596 2021-03-03 18:56 tinytemplate-1.2.1/Cargo.toml.orig
-rw-r--r-- 0/0            1183 1969-12-31 19:00 tinytemplate-1.2.1/Cargo.toml
-rwxrwxrwx 1000/1000     10847 2019-01-26 09:01 tinytemplate-1.2.1/LICENSE-APACHE
-rwxrwxrwx 1000/1000      1057 2019-01-26 09:01 tinytemplate-1.2.1/LICENSE-MIT
-rwxrwxrwx 1000/1000      4724 2021-01-03 15:43 tinytemplate-1.2.1/README.md
-rwxrwxrwx 1000/1000      1469 2019-01-26 09:01 tinytemplate-1.2.1/benches/benchmarks.rs
-rwxrwxrwx 1000/1000     27364 2021-01-03 15:28 tinytemplate-1.2.1/src/compiler.rs
-rwxrwxrwx 1000/1000      7313 2021-03-03 18:54 tinytemplate-1.2.1/src/error.rs
-rwxrwxrwx 1000/1000      3382 2021-01-03 15:28 tinytemplate-1.2.1/src/instruction.rs
-rwxrwxrwx 1000/1000      8460 2021-01-03 14:53 tinytemplate-1.2.1/src/lib.rs
-rwxrwxrwx 1000/1000      6721 2021-01-03 14:53 tinytemplate-1.2.1/src/syntax.rs
-rwxrwxrwx 1000/1000     33095 2021-01-03 15:37 tinytemplate-1.2.1/src/template.rs
-rw-r--r-- 0/0              74 1969-12-31 19:00 tinytemplate-1.2.1/.cargo_vcs_info.json
$ 

typically, source code files are not marked as executable.

On debian systems, this causes executable-not-elf-or-script lintian warnings for the rust-tinytemplate-dev package.

I'm not sure how you're generating the crates for tinytemplate, but it looks like they could be generated in a way that avoids setting the execute bit on each source file.

dkg avatar Aug 18 '21 17:08 dkg