You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Using the system provided mkdtemp will make the directory only readable by the user running the script
Snippet from discussion:
could we simply fix this by not relying on system generated temporary dirs for this? You are already creating these in a directory you control, how about temp/temp_package_name_millisecondsSinceEpoch for the temporary name? Creating that with the normal Directory.create function? It should be a pretty local change if I remember correctly on how pub has the io library
Since there can potentially be more than one pub instance running (in different directories concurrently, getting the same package) - consider also including a hash of the directory you are invoking pub on in the dir name.
The text was updated successfully, but these errors were encountered:
I'm worried that any schema would either allow for potential conflicts or be burdensomely complex. Also, it seems hacky to add a workaround for this in pub when we could just fix issue dart-lang/sdk#15078 and provide value for the entire ecosystem.
<img src="https://avatars.githubusercontent.com/u/5475521?v=3" align="left" width="96" height="96"hspace="10"> Issue by ricowind
Originally opened as dart-lang/sdk#22586
Using the system provided mkdtemp will make the directory only readable by the user running the script
Snippet from discussion:
could we simply fix this by not relying on system generated temporary dirs for this? You are already creating these in a directory you control, how about temp/temp_package_name_millisecondsSinceEpoch for the temporary name? Creating that with the normal Directory.create function? It should be a pretty local change if I remember correctly on how pub has the io library
Since there can potentially be more than one pub instance running (in different directories concurrently, getting the same package) - consider also including a hash of the directory you are invoking pub on in the dir name.
The text was updated successfully, but these errors were encountered: