Skip to content

Commit d41268f

Browse files
committed
[fix] install: safely set xq and collections as executable
Deployment.setPermissions now calls UnixStylePermission.safeSetExecutable instead of setting them always to world executable.
1 parent d383df8 commit d41268f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

exist-core/src/main/java/org/exist/repo/Deployment.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -875,7 +875,7 @@ private void setPermissions(final DBBroker broker, final Optional<RequestedPerms
875875
}
876876

877877
if (isCollection || (mime != null && mime.getName().equals(MimeType.XQUERY_TYPE.getName()))) {
878-
mode = mode | 0111; //TODO(AR) Whoever did this - this is a really bad idea. You are circumventing the security of the system
878+
mode = UnixStylePermission.safeSetExecutable(mode);
879879
}
880880

881881
PermissionFactory.chmod(broker, permission, Optional.of(mode), Optional.empty());

0 commit comments

Comments
 (0)