commit d2e69fee252e61b63b61a75418e15bbf46045714 Author: Danny Rawlins <contact@romster.me> Date: Thu Jan 28 18:30:38 2021 +1100 [notify] python3-pip: fix world writable files diff --git a/python3-pip/.footprint b/python3-pip/.footprint index cbba4a17c..ab87e1065 100644 --- a/python3-pip/.footprint +++ b/python3-pip/.footprint @@ -6,12 +6,12 @@ drwxr-xr-x root/root usr/lib/ drwxr-xr-x root/root usr/lib/python3.9/ drwxr-xr-x root/root usr/lib/python3.9/site-packages/ drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/ --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/PKG-INFO --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/SOURCES.txt --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/dependency_links.txt --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/entry_points.txt --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/not-zip-safe --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/top_level.txt +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/PKG-INFO +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/SOURCES.txt +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/dependency_links.txt +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/entry_points.txt +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/not-zip-safe +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip-21.0-py3.9.egg-info/top_level.txt drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/ -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/__init__.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/__main__.py @@ -522,7 +522,7 @@ drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/__pycac -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/__pycache__/__main__.cpython-39.pyc -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/__pycache__/core.cpython-39.opt-1.pyc -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/__pycache__/core.cpython-39.pyc --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/cacert.pem +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/cacert.pem -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/certifi/core.py drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/chardet/ -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/chardet/__init__.py @@ -724,7 +724,7 @@ drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backpo -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/__pycache__/tarfile.cpython-39.pyc -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/misc.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/shutil.py --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/sysconfig.cfg +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/sysconfig.cfg -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/sysconfig.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backport/tarfile.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/compat.py @@ -736,12 +736,12 @@ drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/_backpo -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/metadata.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/resources.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/scripts.py --rwxrwxrwx root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/t32.exe --rwxrwxrwx root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/t64.exe +-rwxrwxr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/t32.exe +-rwxrwxr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/t64.exe -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/util.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/version.py --rwxrwxrwx root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/w32.exe --rwxrwxrwx root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/w64.exe +-rwxrwxr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/w32.exe +-rwxrwxr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/w64.exe -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distlib/wheel.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/distro.py drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/html5lib/ @@ -1219,7 +1219,7 @@ drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/urllib3/util/__ -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/urllib3/util/timeout.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/urllib3/util/url.py -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/urllib3/util/wait.py --rw-rw-rw- root/root usr/lib/python3.9/site-packages/pip/_vendor/vendor.txt +-rw-rw-r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/vendor.txt drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/webencodings/ -rw-r--r-- root/root usr/lib/python3.9/site-packages/pip/_vendor/webencodings/__init__.py drwxr-xr-x root/root usr/lib/python3.9/site-packages/pip/_vendor/webencodings/__pycache__/ diff --git a/python3-pip/.signature b/python3-pip/.signature index c1dadacab..ccb142570 100644 --- a/python3-pip/.signature +++ b/python3-pip/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/a2fbgLirXBamnpnckgFCpixwYhxDHrEgKp1if/H3zJQYJZw//4HamLspunINLLH8FedZF4VCH/Y2lo0Gd3sBgs= -SHA256 (Pkgfile) = d0edb6b1dc575ce133b8f779e645ee513cf37ef7aad209314975c2bfe738e62b -SHA256 (.footprint) = 2c78ca99a4a83542fd65fab08496f19b3f21b254c27fe4a7110124a8bc8c52c2 +RWSE3ohX2g5d/aq8zRB/7uRuB3y5spIpqWyR4cYCtlaeNRwFEZQZGEgj3XpNqOHXbXlXZOF9HfK4nqvId1ZzoNXlB9xZ8L0VxAE= +SHA256 (Pkgfile) = 77aabe9211c266229663027d0ed9d53bae51060c3f36eefc646925ffa1d5849f +SHA256 (.footprint) = 4df7798edd6b40e5dd19a664a888194394d64c28aecc7bf452460485a2d3f7c3 SHA256 (pip-21.0.tar.gz) = b330cf6467afd5d15f4c1c56f5c95e56a2bfb941c869bed4c1aa517bcb16de25 diff --git a/python3-pip/Pkgfile b/python3-pip/Pkgfile index b72f851af..722b73155 100644 --- a/python3-pip/Pkgfile +++ b/python3-pip/Pkgfile @@ -5,7 +5,7 @@ name=python3-pip version=21.0 -release=1 +release=2 source=(https://files.pythonhosted.org/packages/source/${name:8:1}/${name#*-}/${name#*-}-$version.tar.gz) build() { @@ -17,4 +17,7 @@ build() { --prefix=/usr --root=$PKG --optimize=1 rm $PKG/usr/bin/pip + + # again why does this happen? + find $PKG/usr/lib/python3.9/site-packages -type f -exec chmod o-w '{}' \+ }