Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should set permissive umask before exec. #486

Closed
pillarsdotnet opened this issue May 22, 2019 · 0 comments · Fixed by #487
Closed

Should set permissive umask before exec. #486

pillarsdotnet opened this issue May 22, 2019 · 0 comments · Fixed by #487

Comments

@pillarsdotnet
Copy link
Contributor

In my use-case, we have a restrictive umask 0027 as required by CIS security-hardening standards. Puppet (and thus puppet-python inherits this umask. The files installed by pip are affected by this umask.

In order to make installed Python pips available to non-root users, this module should set a permissive umask such as 0002 or 0022 before invoking pip.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant