{"action":"created","issue":{"url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/93","repository_url":"https://api.github.com/repos/yujinrobot/yujin_tools","labels_url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/93/labels{/name}","comments_url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/93/comments","events_url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/93/events","html_url":"https://github.com/yujinrobot/yujin_tools/issues/93","id":165042248,"number":93,"title":"groot_binaries create folder with wrong permissions","user":{"login":"asmodehn","id":221256,"avatar_url":"https://avatars.githubusercontent.com/u/221256?v=3","gravatar_id":"","url":"https://api.github.com/users/asmodehn","html_url":"https://github.com/asmodehn","followers_url":"https://api.github.com/users/asmodehn/followers","following_url":"https://api.github.com/users/asmodehn/following{/other_user}","gists_url":"https://api.github.com/users/asmodehn/gists{/gist_id}","starred_url":"https://api.github.com/users/asmodehn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asmodehn/subscriptions","organizations_url":"https://api.github.com/users/asmodehn/orgs","repos_url":"https://api.github.com/users/asmodehn/repos","events_url":"https://api.github.com/users/asmodehn/events{/privacy}","received_events_url":"https://api.github.com/users/asmodehn/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2016-07-12T10:12:31Z","updated_at":"2016-08-16T03:59:06Z","closed_at":null,"body":"Running \r\n`sudo groot_binaries --devel --external` on a vanilla machine build this structure : \r\n\r\n```\r\nyujin@concert:~$ ll /opt/yujin/amd64/indigo-devel/\r\ntotal 84\r\ndrwxr-xr-x   7 root root  4096 Jul 12 04:40 ./\r\ndrwxr-xr-x   4 root root  4096 Jul 11 05:20 ../\r\ndrwxr-xr-x   2 root root  4096 Jul 12 04:40 bin/\r\n-rw-r--r--   1 root root     0 Jul 12 04:40 build-201607120318\r\n-rw-r--r--   1 root root     0 Jul 12 04:40 .catkin\r\n-rwxr-xr-x   1 root root   506 Jul 12 04:40 env.sh*\r\ndrwxr-xr-x   3 root root  4096 May 16 07:24 etc/\r\ndrwxr-xr-x 121 root root  4096 Jul 12 04:40 include/\r\ndrwx------ 120 root root 12288 Jul 12 04:40 lib/\r\n-rw-r--r--   1 root root    69 Jul 12 04:40 .rosinstall\r\n-rw-r--r--   1 root root   260 Jul 12 04:40 setup.bash\r\n-rw-r--r--   1 root root  2542 Jul 12 04:40 setup.sh\r\n-rwxr-xr-x   1 root root 12301 Jul 12 04:40 _setup_util.py*\r\n-rw-r--r--   1 root root   270 Jul 12 04:40 setup.zsh\r\ndrwx------ 304 root root 16384 Jul 11 06:22 share/\r\n```\r\n\r\nAs a result, a user other than root (yujin) cannot execute anything from lib or share (including the desktop utilities scripts)\r\n\r\nSo should we : \r\n\r\n1. Document that `groot_binaries` should be run with the same user as the user who will be executing these binaries, and therefore the permissions on /opt must be changed on a vanilla machine (maybe I missed it ?)\r\n1. Fix the script somehow, so that it create 744 permission on these directories instead of 700\r\n1. Both ?\r\n"},"comment":{"url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/comments/239995287","html_url":"https://github.com/yujinrobot/yujin_tools/issues/93#issuecomment-239995287","issue_url":"https://api.github.com/repos/yujinrobot/yujin_tools/issues/93","id":239995287,"user":{"login":"asmodehn","id":221256,"avatar_url":"https://avatars.githubusercontent.com/u/221256?v=3","gravatar_id":"","url":"https://api.github.com/users/asmodehn","html_url":"https://github.com/asmodehn","followers_url":"https://api.github.com/users/asmodehn/followers","following_url":"https://api.github.com/users/asmodehn/following{/other_user}","gists_url":"https://api.github.com/users/asmodehn/gists{/gist_id}","starred_url":"https://api.github.com/users/asmodehn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asmodehn/subscriptions","organizations_url":"https://api.github.com/users/asmodehn/orgs","repos_url":"https://api.github.com/users/asmodehn/repos","events_url":"https://api.github.com/users/asmodehn/events{/privacy}","received_events_url":"https://api.github.com/users/asmodehn/received_events","type":"User","site_admin":false},"created_at":"2016-08-16T03:59:06Z","updated_at":"2016-08-16T03:59:06Z","body":"Found that relevant piece of discussion : https://blueprints.launchpad.net/ubuntu/+spec/umask-to-0002\r\n\r\nOn my trusty at work I get : \r\n```\r\n$ cat /etc/login.defs \r\n[...]\r\nERASECHAR\t0177\r\nKILLCHAR\t025\r\nUMASK\t\t022\r\n\r\n```\r\nAnd I didnt know about the pam module so I probably never changed it."}}
{"actor":{"display_login":"asmodehn"}}