Forum: Ruby-core [ruby-trunk - Bug #7784][Open] [mingw] r39055 creates test failures and functionality loss

Posted by jonforums (Jon Forums) (Guest)
on 2013-02-05 06:54
(Received via mailing list)
Issue #7784 has been reported by jonforums (Jon Forums).

----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784

Author: jonforums (Jon Forums)
Status: Open
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Posted by jonforums (Jon Forums) (Guest)
on 2013-02-05 07:22
(Received via mailing list)
Issue #7784 has been updated by jonforums (Jon Forums).


it doesn't solve the issue, but why is the permissions check not being 
isolated to only gem push?
----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-35850

Author: jonforums (Jon Forums)
Status: Open
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Posted by Luis Lavena (luislavena)
on 2013-02-05 14:50
(Received via mailing list)
Issue #7784 has been updated by luislavena (Luis Lavena).

Status changed from Open to Assigned


----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-35861

Author: jonforums (Jon Forums)
Status: Assigned
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Posted by drbrain (Eric Hodel) (Guest)
on 2013-02-05 20:43
(Received via mailing list)
Issue #7784 has been updated by drbrain (Eric Hodel).

Status changed from Assigned to Closed

Fixed by r39070 which removes the check on windows. If writing a file as 
0600 works on windows someday we can reintroduce it.

Credentials are loaded when .gemrc is loaded. Changing when credentials 
are loaded is too risky.
----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-35868

Author: jonforums (Jon Forums)
Status: Closed
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Posted by usa (Usaku NAKAMURA) (Guest)
on 2013-02-07 13:12
(Received via mailing list)
Issue #7784 has been updated by usa (Usaku NAKAMURA).

Status changed from Closed to Assigned

Eric, please backport r39133 to rubygems trunk :)
----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-35978

Author: jonforums (Jon Forums)
Status: Assigned
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Posted by Eric Hodel (Guest)
on 2013-02-07 22:41
(Received via mailing list)
On Feb 7, 2013, at 04:12, "usa (Usaku NAKAMURA)" <usa@garbagecollect.jp> 
wrote:

> Issue #7784 has been updated by usa (Usaku NAKAMURA).
>
> Status changed from Closed to Assigned
>
> Eric, please backport r39133 to rubygems trunk :)

Done!
Posted by drbrain (Eric Hodel) (Guest)
on 2013-02-13 23:21
(Received via mailing list)
Issue #7784 has been updated by drbrain (Eric Hodel).

Status changed from Assigned to Closed


----------------------------------------
Bug #7784: [mingw] r39055 creates test failures and functionality loss
https://bugs.ruby-lang.org/issues/7784#change-36251

Author: jonforums (Jon Forums)
Status: Closed
Priority: Normal
Assignee: drbrain (Eric Hodel)
Category: core
Target version: 2.0.0
ruby -v: ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]


The r39055 patch for rubygems security (lib/rubygems/config_file.rb) 
causes 11 `make test-all` failures

  http://ci.rubyinstaller.org/job/ruby-trunk-x64-tes...

and loss of gem command functionality due to typical default windows 
file permissions on one's rubygems.org `credentials` file:

    C:\>ruby --version
    ruby 2.0.0dev (2013-02-05 trunk 39055) [i386-mingw32]

    C:\>gem --version
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

    C:\>gem list
    ERROR:  Your gem push credentials file located at:

            C:/Users/Jon/.gem/credentials

    has file permissions of 0644 but 0600 is required.

    You should reset your credentials at:

            https://rubygems.org/profile/edit

    if you believe they were disclosed to a third party.

If you try changing the file to read-only in the gui, ruby thinks the 
permissions are:

    >> File.stat('credentials').mode.to_s(8)[2..5]
    => "0444"

which still causes usage failures. I've removed all users/group 
permissions except my own (from the windows security tab gui) on win7, 
but the failure continues. Spelunking...
Please log in before posting. Registration is free and takes only a minute.
Existing account (Switch to SSL-encrypted connection)
NEW: Do you have a Google/GoogleMail or Yahoo account? No registration required!
Log in with Google account | Log in with Yahoo account
No account? Register here.