develooper Front page | perl.qa | Postings from November 2008

Re: [PATCH] ExtUtils::MakeMaker and world writable files in dists

Thread Previous | Thread Next
From:
chromatic
Date:
November 12, 2008 23:18
Subject:
Re: [PATCH] ExtUtils::MakeMaker and world writable files in dists
Message ID:
200811122318.04135.chromatic@wgz.org
On Wednesday 12 November 2008 22:36:31 demerphq wrote:

> > I really, really, really don't want PAUSE modifying my stuff after it's
> > uploaded.  Oh god the mysterious bugs.  And then there's the fact that
> > the code I've put my name and signature on is not the same code as is
> > being distributed!  That's a trust violation as well as maybe a license
> > violation.

> Oh please, save me the drama. We aren't talking about modifying "your
> stuff" we are talking about twiddling some bits in a tar file.

I can only think of several ways that could possibly go wrong.

I understand why PAUSE enforces the policy that it won't index anything it 
can't index, but I don't understand what permission bits that may or may not 
be set have to do with indexing.

I realize the longstanding Perl cultural view of encapsulation is, to put it 
mildly, highly voluntary -- but the first time I catch a naked, drunk 
neighbor rifling through my closet is the last time any naked, drunk neighbor 
rifles through my closet, regardless of sincerity of intent.

-- c

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About