From: Harry Ohlsen <harryo@...>
Date: 2003-11-25T15:45:19+09:00
Subject: Re: Message "Insecure world writable dir ..."

Thien Vuong wrote:


> but ruby still issue warning, so my test was
> 
> /tmp has permission problem
> /tmp/bin does not have permission problem
 
> ruby does not complain when /tmp/bin (permission is OK) is in the path, 
> only when /tmp (permission is bad) is in the path.  Sorry if I
> misunderstood your point

But your path has "." in it.  Since you're sitting in /tmp, that explains this warning ...

>>> [1.21:14:22] tvuong>cd /tmp
>>> [2.21:14:26] tmp>PATH=".:/bin:/home/eng/tools/bin"
>>> [3.21:14:39] tmp>irb-1.8
>>> irb(main):001:0> system "date"
>>> (irb):1: warning: Insecure world writable dir /tmp/., mode 041777

However, when you cd into bin (ie, /tmp/bin), "." is now /tmp/bin, not /tmp.

However, I see your point.  Perhaps Ruby only complains about directories that are literally in the path, and doesn't convert "." before doing the check.  So, in this case it's not looking at both /tmp and /tmp/bin, just ".", which is /tmp/bin ... but that's just a guess.

You could try changing your path to "/tmp/bin:/bin:/home/eng/tools/bin" and see if you get the error then. I would expect you to, but am not sure.

Cheers,

Harry O.