archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-09-15 16:44:01 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

CI: Make parents of PATH directories world-unwritable

Browse source
This commit is contained in:
Nobuyoshi Nakada 2025-01-14 11:26:25 +09:00
parent 8891890bff
commit d74e9ef712
No known key found for this signature in database
GPG key ID: 3582D74E1FEE4465
1 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

11
.github/actions/setup/directories/action.yml vendored
View file

@ -140,8 +140,15 @@ runs:
run: | run: |
sudo chmod -R go-w /usr/share sudo chmod -R go-w /usr/share
chmod -v go-w $HOME $HOME/.config || : chmod -v go-w $HOME $HOME/.config || :
SAVE_IFS="$IFS" IFS=:; set $PATH; dirs=() IFS="$SAVE_IFS" declare -a dirs # -A is not supported by old bash, e.g. macos
for d do [ ! -d "$d" ] || dirs+=("$d"); done SAVE_IFS="$IFS" IFS=:; set $PATH
for d do
while [ -d "$d" ]; do
case "$IFS${dirs[*]}$IFS" in *"$IFS$d$IFS"*) ;; *) dirs+=("$d");; esac
d="${d%/*}"
done
done
IFS="$SAVE_IFS"
sudo chmod -v go-w "${dirs[@]}" || : sudo chmod -v go-w "${dirs[@]}" || :
- if: inputs.dummy-files == 'true' - if: inputs.dummy-files == 'true'