linuxmint / cinnamon

A Linux desktop featuring a traditional layout, built from modern technology and introducing brand new innovative features.
GNU General Public License v2.0
4.4k stars 722 forks source link

Spices.py: Preserve original file permissions of downloaded spices #12174

Closed fredcw closed 3 days ago

fredcw commented 2 weeks ago

Preserve original file permissions of all files in downloaded spice zipfile. This is an improvement on commit https://github.com/linuxmint/cinnamon/commit/42b1e53ef4ae0d26df7a8e8f588cdcfd47be2b12 which give all files the same permissions.

anaximeno commented 2 weeks ago

I agree, I was thinking about this recently too, since it could be a vulnerability point.