Date: Wed, 5 Apr 2006 15:11:20 -0500 From: Garance A Drosihn <drosih@rpi.edu> To: Jonas Jacobsen <jonas@lintoo.dk>, freebsd-questions@freebsd.org Subject: Re: Portupgrade & Ruby | warning: Insecure world Message-ID: <p06230941c059d3bcf1b9@[128.113.24.47]> In-Reply-To: <4433C86A.2060106@lintoo.dk> References: <4433C86A.2060106@lintoo.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
At 3:38 PM +0200 4/5/06, Jonas Jacobsen wrote: >When i use portupgrade, i get this Warning all the time > >/usr/local/lib/ruby/site_ruby/1.8/pkgtools.rb:980: > warning: Insecure world writable dir /tmp, mode 041777 > >have any of you seen that warning before,? and do you >know how to make it go away ? This comes from a recent security-minded change made to ruby. Your PATH references something in /tmp, and since other userids *could* change things in /tmp, this is warning that you might have a security problem. I think several ruby users have found this recent change is perhaps a bit over-zealous in it's warning. Which is to say, "it is annoying". You could change your setting of PATH to avoid this. Perhaps the pkgtools.rb script could be changed to automatically change the PATH, but in this case it would have no idea *why* you reference some directory under /tmp in your PATH. So it's probably a bad idea for the script to change the value. -- Garance Alistair Drosehn = gad@gilead.netel.rpi.edu Senior Systems Programmer or gad@freebsd.org Rensselaer Polytechnic Institute or drosih@rpi.edu
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?p06230941c059d3bcf1b9>