Ensure gems don't have world-writable files (#468)

cloudfoundry · Sep 23, 2024 · 3d46cad · 3d46cad
1 parent 644cbc8
commit 3d46cad
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/cloud_controller_ng/packaging b/packages/cloud_controller_ng/packaging
@@ -12,3 +12,6 @@ export PATH=$libpq_dir/bin:$PATH
 bundle config build.pg --with-pg-lib=$libpq_dir/lib --with-pg-include=$libpq_dir/include
 bundle config build.mysql2 --with-mysql-config=$mariadb_dir/bin/mariadb_config-wrapper.sh
 bosh_bundle_local --deployment
+
+# remove world-writable permissions on files if a gem has them
+chmod -R o-w ../gem_home