marko10_000
/
flatpak-builder
forked from Mirrors/flatpak-builder
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

build-export: Never export files you can't read 

It makes no sense to have these in a runtime or an app, it just
causes issues.
tingping/wmclass
Alexander Larsson 2016-01-22 12:21:49 +01:00
parent 03905e181a
commit 62c0d3ad3d
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/xdg-app-builtins-build-export.c
View File

@ -135,15 +135,18 @@ commit_filter (OstreeRepo *repo,
GFileInfo *file_info,
CommitData *commit_data)
{
guint current_mode;
guint mode;
/* No user info */
g_file_info_set_attribute_uint32 (file_info, "unix::uid", 0);
g_file_info_set_attribute_uint32 (file_info, "unix::gid", 0);
mode = g_file_info_get_attribute_uint32 (file_info, "unix::mode");
/* No setuid */
current_mode = g_file_info_get_attribute_uint32 (file_info, "unix::mode");
g_file_info_set_attribute_uint32 (file_info, "unix::mode", current_mode & ~07000);
mode = mode & ~07000;
/* All files readable */
mode = mode | 0444;
g_file_info_set_attribute_uint32 (file_info, "unix::mode", mode);
if (matches_patterns (commit_data->exclude, path) &&
!matches_patterns (commit_data->include, path))