GNU bug report logs - #19615
make dist tarball contains owner/group information from the build system

Previous Next

Package: automake;

Reported by: Dimitrios Apostolou <jimis <at> gmx.net>

Date: Fri, 16 Jan 2015 15:08:01 UTC

Severity: normal

Tags: confirmed

Merged with 60419

Found in version 1.16

Done: Karl Berry <karl <at> freefriends.org>

Bug is archived. No further changes may be made.

Full log


Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Dimitrios Apostolou <jimis <at> gmx.net>
To: bug-automake <at> gnu.org
Subject: make dist tarball contains owner/group information from the build
 system
Date: Fri, 16 Jan 2015 16:07:03 +0100 (CET)
(Please CC me in the replies as I'm not subscribed)

Hello list,

examing the tarballs generated by "make dist" using "tar -tzvvf", it seems 
that information about group/owner of the buildsystem is being leaked. 
Example output - notice the jenkins/jenkins field:

# tar -tzvvf core/cfengine-3.7.0a1.5ffcc54.tar.gz   | head
drwxrwxr-x jenkins/jenkins   0 2015-01-16 02:54:12 cfengine-3.7.0a1.5ffcc54/
-rw-rw-r-- jenkins/jenkins 34036 2015-01-16 02:53:55 cfengine-3.7.0a1.5ffcc54/Makefile.in
-rwxrwxr-x jenkins/jenkins 658314 2015-01-16 02:53:51 cfengine-3.7.0a1.5ffcc54/configure
-rw-rw-r-- jenkins/jenkins   4973 2014-10-27 14:39:26 cfengine-3.7.0a1.5ffcc54/Makefile.am

My workaround is to add the following in Makefile.am:

TAR_OPTIONS = --owner=0 --group=0
export TAR_OPTIONS

I expected that something like this would be the default though.


Thanks,
Dimitris





This bug report was last modified 1 year and 322 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.