Unnecessary world-writable permissions for Auto-Update

paolorotolo / android-studio

[DEPRECATED] Android Studio by Google packaged for Ubuntu.

http://paolorotolo.github.io/android-studio/

Apache License 2.0

199 stars 37 forks source link

Unnecessary world-writable permissions for Auto-Update #26

Open disasmwinnie opened 8 years ago

disasmwinnie commented 8 years ago

The whole software installed into /opt world-writeable in order the Auto-Updater to work. What is the point using Auto-Updater if you package a software by your self.

This not only contradicts FSH but is a security issue in general. Please remove the CHMODs in postinstall.

disasmwinnie commented 8 years ago

That's a security hole. Please see discussion in https://github.com/mfonville/android-studio/issues/1 which also discussed what to change.