[issue14299] OS X installer build script: permissions not ensured

[Nicholas Riley]

New submission from Nicholas Riley <com-python-bugs at sabi.net>:

The OS X installer build script does not ensure that files had the correct permissions when being packaged; some files' permissions were affected by your umask when running the build script, and others by the permissions of the source tree.

This patch sets the umask, so script-created files get correct permissions, wraps shutil.copy so it does the same thing, and adapts the existing os.walk-based permissions fixer to run over everything else.

It also removes group writability for the Python framework, as this is more secure and consistent with how Apple installs Python in 10.7 and later.  If you need to install a Python package without being root, either use virtualenv/pythonv, ~/Library or ~/.local.  Ned Deily and I discussed this at the PyCon sprints and he will update the documentation to match.

----------
assignee: ronaldoussoren
components: Macintosh
files: perm.patch
keywords: patch
messages: 155716
nosy: nriley, ronaldoussoren
priority: normal
severity: normal
status: open
title: OS X installer build script: permissions not ensured
type: behavior
versions: Python 3.3
Added file: http://bugs.python.org/file24837/perm.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14299>
_______________________________________