Skip to content

SECURITY: don't create world-writable directories #18

Open

Description

@docwhat

Running ./install.sh creates several directories with world-writable directories.

This is a Bad Idea™ and potentially opens up a user to security problems.

$ find ~/microclimate-workspace ~/.microclimate -perm 0777 -ls
8609685518      0 drwxrwxrwx   6  docwhat  staff         192 Aug 13 11:04 /Users/docwhat/microclimate-workspace
8609685519      0 drwxrwxrwx   4  docwhat  staff         128 Aug 13 11:04 /Users/docwhat/microclimate-workspace/.config

Activity

  1. sishida commented on Feb 22, 2019

    @sishida
    Collaborator

    Thank you for raising this issue! We apologize for the delay, but the Microclimate team is currently working on a solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions