New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SECURITY: don't create world-writable directories #18

Open

docwhat opened this issue Aug 13, 2018 · 1 comment

docwhat commented Aug 13, 2018

Running ./install.sh creates several directories with world-writable directories.

This is a Bad Idea™ and potentially opens up a user to security problems.

$ find ~/microclimate-workspace ~/.microclimate -perm 0777 -ls
8609685518      0 drwxrwxrwx   6  docwhat  staff         192 Aug 13 11:04 /Users/docwhat/microclimate-workspace
8609685519      0 drwxrwxrwx   4  docwhat  staff         128 Aug 13 11:04 /Users/docwhat/microclimate-workspace/.config

The text was updated successfully, but these errors were encountered:

Collaborator

sishida commented Feb 22, 2019

Thank you for raising this issue! We apologize for the delay, but the Microclimate team is currently working on a solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment