PAUSE Error

JStrom has asked for the wisdom of the Perl Monks concerning the following question:

Replies are listed 'Best First'.
Re: PAUSE Error by brian_d_foy (Abbot) on Sep 29, 2008 at 07:09 UTC
This is a change to the PAUSE indexer. It's no longer indexing things that are world-writeable. See the recent threads on the perl-qa list, especially Dealing with World-writable Files in the Archive of CPANDistributions, as well as the discussion on use.perl. The fix is to find out which tar you are using and how to set its default permissions, even if you are on Windows. Although Windows doesn't have the idea of unixy permissions, the things it tars up untar in certain ways on Unix. Good luck, :) -- brian d foy <brian@stonehenge.com> Subscribe to The Perl Review	[reply]
Re: PAUSE Error by graff (Chancellor) on Sep 29, 2008 at 04:06 UTC
I don't have any direct experience with this, but I think the error message says it all. The computer where you used Strawberry Perl might not have been MS-Windows? (Or maybe it was Windows, but the setup with Strawberry knows how to set unix-style file permissions in the "normal" way). Anyway, your use of ActiveState tools seems to have created an upload package in which the unix-style permissions on directories and files allow "group" and "other" users to alter/add/replace file and directory contents. I've seen this sort of result whenever people upload stuff from a windows system to a unix/linux server, and I'm guessing that's the problem. Check the manual for whatever tool you use to create the uploaded package file (tar? zip?); there should be an option to control the unix-style file permissions (even though you are working from a Windows box). Make sure the permissions come out looking like "rwxr-xr-x" for directories and executable files, and "rw-r--r--" for other files. (If you are using "tar", run "tar tvf your_file.tar" to see how the permissions look.)	[reply]
Re: PAUSE Error by ikegami (Patriarch) on Sep 29, 2008 at 05:35 UTC
The only difference between this and the last version is that I did It may not be a difference in what you did. I believe this security problem surfaced recently (but I can't find the link) and therefore the message could be the result of a recent change to PAUSE. Address the issue stated in the message rather than trying to figure out what you did different. Update: Below, brian d foy posted the aforementioned link I couldn't find: Dealing with World-writable Files in the Archive of CPANDistributions. He also confirmed my suspicions that this is a recent change.	[reply]
Re: PAUSE Error by syphilis (Archbishop) on Sep 29, 2008 at 07:22 UTC
I use GNU tar on Windows to tar my CPAN distros. It has given me no trouble. (My latest tarball upload to CPAN was about 30 hours ago.) Here's the output of my 'tar --version': `tar (GNU tar) 1.13.19 Copyright 2001 Free Software Foundation, Inc. This program comes with NO WARRANTY, to the extent permitted by law. You may redistribute it under the terms of the GNU General Public Lice +nse; see the file named COPYING for details. Written by John Gilmore and Jay Fenlason.` [download] Cheers, Rob	[reply] [d/l]
Re: PAUSE Error by JStrom (Pilgrim) on Sep 29, 2008 at 21:16 UTC
Fixed, that was the problem. It appears that I have two copies of tar on my machine and when I switched around the path to use strawberry, I also switched which version I was running. (tar 1.12 was setting the permissions to 0666 but tar 1.20 uses 0700) Many thanks.	[reply]
Re: PAUSE Error by GrandFather (Saint) on Oct 19, 2008 at 00:14 UTC
Using ExtUtils::MakeMaker if you add: `dist => {TARFLAGS => '--create --verbose --mode=0700 --fil +e '},` [download] the the WriteMakefile call and use GNU tar 1.13 or later the permissions are set correctly. GNU tar 1.13 is available at time of posting from http://gnuwin32.sourceforge.net/packages.html. Perl reduces RSI - it saves typing	[reply] [d/l]
Re: PAUSE Error by Anonymous Monk on Sep 29, 2008 at 06:35 UTC
Its an old bug in the PAUSE indexer (it should force permissions to whatever its requirements are), I would report it (might get resolved this time).	[reply]
Re^2: PAUSE Error by brian_d_foy (Abbot) on Sep 29, 2008 at 07:11 UTC
It's not a bug in PAUSE, it's a new feature. PAUSE doesn't attempt to change any distributions. It doesn't index them if they'd unwrap with world-writeable bits. This is designed to keep these distributions from being downloaded until the author can fix them. -- brian d foy <brian@stonehenge.com> Subscribe to The Perl Review	[reply]