GNU bug report logs -
#19615
make dist tarball contains owner/group information from the build system
Previous Next
Reported by: Dimitrios Apostolou <jimis <at> gmx.net>
Date: Fri, 16 Jan 2015 15:08:01 UTC
Severity: normal
Tags: confirmed
Merged with 60419
Found in version 1.16
Done: Karl Berry <karl <at> freefriends.org>
Bug is archived. No further changes may be made.
Full log
View this message in rfc822 format
(Please CC me in the replies as I'm not subscribed)
Hello list,
examing the tarballs generated by "make dist" using "tar -tzvvf", it seems
that information about group/owner of the buildsystem is being leaked.
Example output - notice the jenkins/jenkins field:
# tar -tzvvf core/cfengine-3.7.0a1.5ffcc54.tar.gz | head
drwxrwxr-x jenkins/jenkins 0 2015-01-16 02:54:12 cfengine-3.7.0a1.5ffcc54/
-rw-rw-r-- jenkins/jenkins 34036 2015-01-16 02:53:55 cfengine-3.7.0a1.5ffcc54/Makefile.in
-rwxrwxr-x jenkins/jenkins 658314 2015-01-16 02:53:51 cfengine-3.7.0a1.5ffcc54/configure
-rw-rw-r-- jenkins/jenkins 4973 2014-10-27 14:39:26 cfengine-3.7.0a1.5ffcc54/Makefile.am
My workaround is to add the following in Makefile.am:
TAR_OPTIONS = --owner=0 --group=0
export TAR_OPTIONS
I expected that something like this would be the default though.
Thanks,
Dimitris
This bug report was last modified 1 year and 322 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.