Path: csiph.com!aioe.org!bofh.it!news.nic.it!robomod From: Yaroslav Halchenko Newsgroups: linux.debian.maint.python Subject: Re: setup.py sdist permissions Date: Wed, 04 Apr 2018 02:20:01 +0200 Message-ID: References: X-Original-To: debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Wed Apr 4 00:18:38 2018 Old-Return-Path: X-Amavis-Spam-Status: No, score=-9.3 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline X-URL: http://www.onerussian.com X-Image-URL: http://www.onerussian.com/img/yoh.png X-PGP-Key: http://www.onerussian.com/gpg-yoh.asc X-Fingerprint: C5B9 05F0 E8D9 FD96 68FF 366F A2DE 2350 62DA 33FA User-Agent: Mutt/1.9.4 (2018-02-28) X-Sa-Exim-Connect-IP: 76.24.253.1 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: yoh@onerussian.com X-Sa-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:57:07 +0000) X-Sa-Exim-Scanned: Yes (on smtp.onerussian.com) X-Mailing-List: archive/latest/15772 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20180404001814.GP4073@hopa.kiewit.dartmouth.edu Approved: robomod@news.nic.it Lines: 34 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Tue, 3 Apr 2018 20:18:14 -0400 X-Original-Message-ID: <20180404001814.GP4073@hopa.kiewit.dartmouth.edu> X-Original-References: <87muykdjst.fsf@silverfish.pri> Xref: csiph.com linux.debian.maint.python:10372 On Wed, 04 Apr 2018, Brian May wrote: > Hello, > As an upstream maintainer of certain packages on pypi, it has come to my > attention that my packages have files in the source package with > permission 600 or 700 (and my owner and group). This is most likely > because my umask is set to 077, because in general I prefer not having > all my private files world/group readable. > * Is this actually a problem for users? > * Shouldn't sdist be ignoring my umask considering it is generating > packages for public consumption? > It seems like the only known solution is to manually set umask to 022 > before calling sdist, something I am likely to forgot to do on a > continued basis. > Any ideas? just anecdotal support: my umask is 077 as well, have been doing uploads to pypi for a while, never had report from the users about any problem. The reasons could be either it indeed doesn't matter or nobody uses my projects ;-) Cheers, -- Yaroslav O. Halchenko Center for Open Neuroscience http://centerforopenneuroscience.org Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik