Skip to content
This repository has been archived by the owner on Jun 28, 2019. It is now read-only.

Unnecessary world-writable permissions for Auto-Update #26

Open
disasmwinnie opened this issue May 11, 2016 · 1 comment
Open

Unnecessary world-writable permissions for Auto-Update #26

disasmwinnie opened this issue May 11, 2016 · 1 comment

Comments

@disasmwinnie
Copy link

The whole software installed into /opt world-writeable in order the Auto-Updater to work. What is the point using Auto-Updater if you package a software by your self.

This not only contradicts FSH but is a security issue in general. Please remove the CHMODs in postinstall.
@disasmwinnie
Copy link
Author

That's a security hole. Please see discussion in mfonville/android-studio#1
which also discussed what to change.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@disasmwinnie