Subject: make dist tarball contains owner/group information from the build system

From: Dimitrios Apostolou <[email-masked]>
Date: Fri, 16 Jan 2015 16:07:03 +0100 (CET)

(Please CC me in the replies as I'm not subscribed)

Hello list,

examing the tarballs generated by "make dist" using "tar -tzvvf", it seems 
that information about group/owner of the buildsystem is being leaked. 
Example output - notice the jenkins/jenkins field:

# tar -tzvvf core/cfengine-3.7.0a1.5ffcc54.tar.gz   | head
drwxrwxr-x jenkins/jenkins   0 2015-01-16 02:54:12 cfengine-3.7.0a1.5ffcc54/
-rw-rw-r-- jenkins/jenkins 34036 2015-01-16 02:53:55 cfengine-3.7.0a1.5ffcc54/Makefile.in
-rwxrwxr-x jenkins/jenkins 658314 2015-01-16 02:53:51 cfengine-3.7.0a1.5ffcc54/configure
-rw-rw-r-- jenkins/jenkins   4973 2014-10-27 14:39:26 cfengine-3.7.0a1.5ffcc54/Makefile.am

My workaround is to add the following in Makefile.am:

TAR_OPTIONS = --owner=0 --group=0
export TAR_OPTIONS

I expected that something like this would be the default though.

Thanks,
Dimitris