Bug 61898 - Add option to make extract directories/files read-only
Add option to make extract directories/files read-only
Status: RESOLVED FIXED
Product: p11-glue
Classification: Unclassified
Component: p11-kit
unspecified
Other All
: medium normal
Assigned To: Stef Walter
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-03-06 11:37 UTC by Stef Walter
Modified: 2013-03-19 18:18 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stef Walter 2013-03-06 11:37:32 UTC
Because the 'p11-kit extract' and 'p11-kit extract-trust' commands are often called in an automated fashion, we should be able to make their output directories chmod -w and thus somewhat read-only.

This could be an additional option to 'p11-kit extract' and packagers or system builders would use that option in their customized 'p11-kit extract-trust' scripts.
Comment 1 Stef Walter 2013-03-19 18:18:20 UTC
Pushed this commit:

commit b6295dd63a8028ae0b239859406c477d779f4d5e
Author: Stef Walter <stefw@gnome.org>
Date:   Tue Mar 19 17:24:47 2013 +0100

    extract: Make extracted output directories read-only
    
    This is not a security feature or anything like that, but a hint
    that the files are managed by the extract tool and should not be
    modified manually.