Skip to content
This repository was archived by the owner on Mar 27, 2025. It is now read-only.

Conversation

@matthijskooijman
Copy link
Collaborator

This PR fixes or improves some of the permissions used by the connector. The permissions on the sketches folder are needed to make things work. I haven't done extensive testing, but basic sketch uploading and running works.

Without this bit on the sketches directory, no files can be created
inside it:

ERROR: download file https://api-builder.arduino.cc/builder/v1/compile/sketch_dec12a.bin:
create /path/to/arduino-connector/sketches/sketch_dec12a:
open /path/to/arduino-connector/sketches/sketch_dec12a: permission denied

The db directory and the file inside it simply does not seem to be
created. In general, all directories should have +x to allow accessing
files inside.
There is no need to make this file executable.
It makes no sense to use 744 (rx for self, r only for group and others),
and the arduino-connector.sh install script initially creates with 755
as well.
There is no real point in making this world-readable, so it is probably
better to keep the data private.
In practice, a umask also applies to these permissions, so it would not
be world-writable anyway. Better to enforce this, and remove the
world-readability at the same time.

Also, having this directory world-writable could very well become a
(part of) security problem.
@facchinm
Copy link
Member

Manually merged

@facchinm facchinm closed this Jan 16, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants