Path: csiph.com!feeder.erje.net!2.eu.feeder.erje.net!newsfeed.datemas.de!weretis.net!feeder4.news.weretis.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod From: Brian May Newsgroups: linux.debian.maint.python Subject: setup.py sdist permissions Date: Wed, 04 Apr 2018 00:20:01 +0200 Message-ID: X-Original-To: debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Tue Apr 3 22:16:14 2018 Old-Return-Path: X-Amavis-Spam-Status: No, score=-7 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -5 X-Greylist: delayed 372 seconds by postgrey-1.36 at bendel; Tue, 03 Apr 2018 22:16:00 UTC Organization: Debian MIME-Version: 1.0 Content-Type: text/plain X-Mailing-List: archive/latest/15771 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/87muykdjst.fsf@silverfish.pri Approved: robomod@news.nic.it Lines: 20 Sender: robomod@news.nic.it X-Original-Date: Wed, 04 Apr 2018 08:09:06 +1000 X-Original-Message-ID: <87muykdjst.fsf@silverfish.pri> Xref: csiph.com linux.debian.maint.python:10371 Hello, As an upstream maintainer of certain packages on pypi, it has come to my attention that my packages have files in the source package with permission 600 or 700 (and my owner and group). This is most likely because my umask is set to 077, because in general I prefer not having all my private files world/group readable. * Is this actually a problem for users? * Shouldn't sdist be ignoring my umask considering it is generating packages for public consumption? It seems like the only known solution is to manually set umask to 022 before calling sdist, something I am likely to forgot to do on a continued basis. Any ideas? -- Brian May