Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hackage creds are read-only (fixes #2159) #4665

Merged
merged 1 commit into from
Mar 31, 2019

Conversation

snoyberg
Copy link
Contributor

Note: Documentation fixes for https://docs.haskellstack.org/en/stable/ should target the "stable" branch, not master.

Please include the following checklist in your PR:

  • Any changes that could be relevant to users have been recorded in the ChangeLog.md
  • The documentation has been updated, if necessary.

Please also shortly describe how you tested your change. Bonus points for added tests!

@snoyberg snoyberg requested a review from nh2 March 27, 2019 10:28
@snoyberg snoyberg force-pushed the 2159-creds-not-world-readable branch 2 times, most recently from 29d4801 to fba88af Compare March 28, 2019 16:12
ChangeLog.md Outdated Show resolved Hide resolved
src/Stack/Upload.hs Show resolved Hide resolved
Copy link
Collaborator

@nh2 nh2 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

Only remaining thing I'd do is, in the comments in writeFilePrivate, link to the docs of openTempFile as reference that the permissions are set up for the user only (in case somebody changes that upstream in the future), and link to the discussion in #2159 (comment) as well.

@snoyberg
Copy link
Contributor Author

Comments added, thanks for the review @nh2!

@snoyberg snoyberg force-pushed the 2159-creds-not-world-readable branch from 70458b2 to d0e99ff Compare March 31, 2019 07:21
@snoyberg snoyberg merged commit be1970e into master Mar 31, 2019
@snoyberg snoyberg deleted the 2159-creds-not-world-readable branch March 31, 2019 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants