commit 7597c9a97485a1bcf9e8dcd1a959a027436111c4 Author: Danny Rawlins <monster.romster@gmail.com> Date: Sun Apr 15 20:58:36 2018 +1000 [notify] python-pip: world writable files fixed diff --git a/python-pip/.footprint b/python-pip/.footprint index c3ae29577..df3075669 100644 --- a/python-pip/.footprint +++ b/python-pip/.footprint @@ -7,13 +7,13 @@ drwxr-xr-x root/root usr/lib/ drwxr-xr-x root/root usr/lib/python2.7/ drwxr-xr-x root/root usr/lib/python2.7/site-packages/ drwxr-xr-x root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/ --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/PKG-INFO --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/SOURCES.txt --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/dependency_links.txt --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/entry_points.txt --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/not-zip-safe --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/requires.txt --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/top_level.txt +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/PKG-INFO +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/SOURCES.txt +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/dependency_links.txt +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/entry_points.txt +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/not-zip-safe +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/requires.txt +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip-10.0.0-py2.7.egg-info/top_level.txt drwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/ -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/__init__.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/__init__.pyc @@ -266,7 +266,7 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/ -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/__main__.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/__main__.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/__main__.pyo --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/cacert.pem +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/cacert.pem -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/core.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/core.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/certifi/core.pyo @@ -428,7 +428,7 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backpo -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/shutil.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/shutil.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/shutil.pyo --rw-rw-rw- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/sysconfig.cfg +-rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/sysconfig.cfg -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/sysconfig.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/sysconfig.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backport/sysconfig.pyo @@ -462,16 +462,16 @@ drwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/_backpo -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/scripts.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/scripts.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/scripts.pyo --rwxrwxrwx root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/t32.exe --rwxrwxrwx root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/t64.exe +-rwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/t32.exe +-rwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/t64.exe -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/util.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/util.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/util.pyo -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/version.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/version.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/version.pyo --rwxrwxrwx root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/w32.exe --rwxrwxrwx root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/w64.exe +-rwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/w32.exe +-rwxr-xr-x root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/w64.exe -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/wheel.py -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/wheel.pyc -rw-r--r-- root/root usr/lib/python2.7/site-packages/pip/_vendor/distlib/wheel.pyo diff --git a/python-pip/.signature b/python-pip/.signature index 54443ea76..b20ded300 100644 --- a/python-pip/.signature +++ b/python-pip/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/WiOrG39gnEgU06fUg/2eT+aDA7DJjnki12QwP2BdX30YmaT1P3GsnCBZd/HyU6OtE6Chtsp930jxLRyEa/fIAs= -SHA256 (Pkgfile) = 1d2cd55dfbbc55bbe41d134c42a5a2f7550049f4576c5a69b4f17410e013c059 -SHA256 (.footprint) = 7ad3f6078082009962f0ff629f6ad373f7f123dd338655bdaa546db80be90019 +RWSE3ohX2g5d/YqgKTTLL7qlbeTYCivm/w3710CTZiZgGbwN200o4vAxKbV+tGK2T0B+m5+bnqBD2Ct3JYkkELmR3IvirBvlBAw= +SHA256 (Pkgfile) = 2bd553c5470b944dc87c3e18e770e4362d9dc0ee2ab95a19a6b662ee85bf033b +SHA256 (.footprint) = 9707d099a11c0378522206af0f95182cdd0e089e55f50df68e8d941c20c7d4cb SHA256 (pip-10.0.0.tar.gz) = f05a3eeea64bce94e85cc6671d679473d66288a4d37c3fcf983584954096b34f SHA256 (get-pip.py) = c21805790f7fa317f09798303281e33f9559096123f713e90a22567c88d28d40 diff --git a/python-pip/Pkgfile b/python-pip/Pkgfile index f3c0fca24..43bd9f72e 100644 --- a/python-pip/Pkgfile +++ b/python-pip/Pkgfile @@ -5,7 +5,7 @@ name=python-pip version=10.0.0 -release=1 +release=2 source=(https://files.pythonhosted.org/packages/source/${name:7:1}/${name#*-}/${name#*-}-$version.tar.gz https://crux.ster.zone/downloads/get-pip.py # https://bootstrap.pypa.io/get-pip.py @@ -39,4 +39,6 @@ Please prt-get depinst python-setuptools to use $name.\033[0m\n" /usr/bin/python setup.py install \ --prefix=/usr --root=$PKG --optimize=1 fi + + chmod -R og-w $PKG }