Bug 61898 - Add option to make extract directories/files read-only
Summary: Add option to make extract directories/files read-only
Status: RESOLVED FIXED
Alias: None
Product: p11-glue
Classification: Unclassified
Component: p11-kit (show other bugs)
Version: unspecified
Hardware: Other All
: medium normal
Assignee: Stef Walter
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-03-06 11:37 UTC by Stef Walter
Modified: 2013-03-19 18:18 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Description Stef Walter 2013-03-06 11:37:32 UTC
Because the 'p11-kit extract' and 'p11-kit extract-trust' commands are often called in an automated fashion, we should be able to make their output directories chmod -w and thus somewhat read-only.

This could be an additional option to 'p11-kit extract' and packagers or system builders would use that option in their customized 'p11-kit extract-trust' scripts.
Comment 1 Stef Walter 2013-03-19 18:18:20 UTC
Pushed this commit:

commit b6295dd63a8028ae0b239859406c477d779f4d5e
Author: Stef Walter <stefw@gnome.org>
Date:   Tue Mar 19 17:24:47 2013 +0100

    extract: Make extracted output directories read-only
    
    This is not a security feature or anything like that, but a hint
    that the files are managed by the extract tool and should not be
    modified manually.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.