From: "jonforums (Jon Forums)" <redmine@...>
Date: 2013-02-05T15:19:45+09:00
Subject: [ruby-core:51865] [ruby-trunk - Bug #7784] [mingw] r39055 creates test failures and functionality loss


Issue #7784 has been updated by jonforums (Jon Forums).


it doesn't solve the issue, but why is the permissions check not being isolated to only gem push?
----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-35850

Author: jonforums (Jon Forums)
Status: Open
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-test-all/659/console

and loss of gem command functionality due to typical default windows file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group permissions except my own (from the windows security tab gui) on win7, but the failure continues. Spelunking... 


-- 
http://bugs.ruby-lang.org/