GNU bug report logs -
#19615
make dist tarball contains owner/group information from the build system
Previous Next
Reported by: Dimitrios Apostolou <jimis <at> gmx.net>
Date: Fri, 16 Jan 2015 15:08:01 UTC
Severity: normal
Tags: confirmed
Merged with 60419
Found in version 1.16
Done: Karl Berry <karl <at> freefriends.org>
Bug is archived. No further changes may be made.
Full log
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
(Please CC me in the replies as I'm not subscribed)
Hello list,
examing the tarballs generated by "make dist" using "tar -tzvvf", it seems
that information about group/owner of the buildsystem is being leaked.
Example output - notice the jenkins/jenkins field:
# tar -tzvvf core/cfengine-3.7.0a1.5ffcc54.tar.gz | head
drwxrwxr-x jenkins/jenkins 0 2015-01-16 02:54:12 cfengine-3.7.0a1.5ffcc54/
-rw-rw-r-- jenkins/jenkins 34036 2015-01-16 02:53:55 cfengine-3.7.0a1.5ffcc54/Makefile.in
-rwxrwxr-x jenkins/jenkins 658314 2015-01-16 02:53:51 cfengine-3.7.0a1.5ffcc54/configure
-rw-rw-r-- jenkins/jenkins 4973 2014-10-27 14:39:26 cfengine-3.7.0a1.5ffcc54/Makefile.am
My workaround is to add the following in Makefile.am:
TAR_OPTIONS = --owner=0 --group=0
export TAR_OPTIONS
I expected that something like this would be the default though.
Thanks,
Dimitris
This bug report was last modified 1 year and 322 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.