Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Modular Jar file permissions changed when fixing modification time #332

Closed
laurentgo opened this issue Apr 27, 2024 · 0 comments · Fixed by #333
Closed

Modular Jar file permissions changed when fixing modification time #332

laurentgo opened this issue Apr 27, 2024 · 0 comments · Fixed by #333

Comments

@laurentgo
Copy link
Contributor

When a new modular jar file is generated with maven-jar-plugin with Java 11, the final permissions of the file are restricted to the current user instead of using the environment umask which usually allows for group and other users to access the file as well.

This is caused by the use of Files#createTempFile() which has a restrictive file permission model for security reason but as the temporary file is generated next to the original jar file, and there's no sensitive reason to restrict its access, the restrictive file permission should not be needed

laurentgo added a commit to laurentgo/arrow that referenced this issue Apr 28, 2024
Downgrade version until
codehaus-plexus/plexus-archiver#332 is fixed.

Clean configuration
laurentgo added a commit to laurentgo/arrow that referenced this issue Apr 28, 2024
Downgrade version until
codehaus-plexus/plexus-archiver#332 is fixed.

Clean configuration
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant