6 Commits (7d2b80371d10e802586ceb6c85019cb1f136a4cb)

Author	SHA1	Message	Date
Amin Vakil	8f02819db0	Replace deprectated include with {import,include}_tasks in apt{,_repository,_key} integration tests (#71964) ... * Replace deprectated include with import_tasks * Fix	4 years ago
Sam Doran	888be697cb	Revert "Change default file permissions so they are not world readable (#70221)" (#71231) ... * Revert "Change default file permissions so they are not world readable (#70221)" This reverts commit 5260527c4a. * Revert "Fix warning for new default permissions when mode is not specified (#70976)" This reverts commit dc79528cc6.	4 years ago
Sam Doran	5260527c4a	Change default file permissions so they are not world readable (#70221) ... * Change default file permissions so they are not world readable CVE-2020-1736 Set the default permissions for files we create with atomic_move() to 0o0660. Track which files we create that did not exist and warn if the module supports 'mode' and it was not specified and the module did not call set_mode_if_different(). This allows the user to take action and specify a mode rather than using the defaults. A code audit is needed to find all instances of modules that call atomic_move() but do not call set_mode_if_different(). The findings need to be documented in a changelog since we are not warning. Warning in those instances would be frustrating to the user since they have no way to change the module code. - use a set for storing list of created files - just check the argument spac and params rather than using another property - improve the warning message to include the default permissions	4 years ago
Brian Coca	ac509d489b	Revert "stricter permissions on atomic_move when creating new file (#68970)" (#68983) ... This reverts commit 566f2467f6.	5 years ago
Brian Coca	566f2467f6	stricter permissions on atomic_move when creating new file (#68970) ... fixes #67794 updated some tests that expected previous defaults CVE-2020-1736	5 years ago
Tim Rupp	46214c9ef4	Replaces #16690 (#58369) ... Adding integration tests for testing the 'mode' arg of the apt_repository module	5 years ago