Project

General

Profile

Bug #8532

tool/runruby.rb:70: warning: Insecure world writable dir /usr/local in PATH, mode 040777

Added by Zachary Scott almost 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
ruby -v:
r41328
[ruby-core:55503]

Description

i've attached the full log

build.log.tar.gz (10.4 KB) Zachary Scott, 06/16/2013 02:42 PM

History

#1 [ruby-core:55506] Updated by Nobuyoshi Nakada almost 3 years ago

No log attached.
What does `ls -dl /usr/local' show?

#2 [ruby-core:55507] Updated by Zachary Scott almost 3 years ago

drwxrwxrwx 21 root admin 714 Jun 14 00:00 /usr/local

re: attachment, try now!

#3 [ruby-core:55508] Updated by Nobuyoshi Nakada almost 3 years ago

  • Status changed from Open to Feedback

Then it's an intended warning.

It's considered dangerous to include a world-writable directory or its descendent directory in PATH.
Why is the system-wide directory world-writable?

#4 [ruby-core:55509] Updated by Zachary Scott almost 3 years ago

i have no idea, what should it be?

#5 [ruby-core:55510] Updated by Zachary Scott almost 3 years ago

  • Status changed from Feedback to Closed

this was my fault (probably), thanks nobu for checking!

#6 [ruby-core:55511] Updated by Nobuyoshi Nakada almost 3 years ago

Remove write-bits:
sudo chmod go-w /usr/local
or make it sticky:
sudo chmod +t /usr/local

Also available in: Atom PDF