456677a3f2
Autogenerated by the [sorbet](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml) workflow.
46 lines
1.7 KiB
Ruby
46 lines
1.7 KiB
Ruby
# typed: strict
|
|
# frozen_string_literal: true
|
|
|
|
require "rubocops/extend/formula_cop"
|
|
|
|
module RuboCop
|
|
module Cop
|
|
module FormulaAudit
|
|
# This cop makes sure that a formula's file permissions are correct.
|
|
class Files < FormulaCop
|
|
sig { override.params(formula_nodes: FormulaNodes).void }
|
|
def audit_formula(formula_nodes)
|
|
return unless file_path
|
|
|
|
# Codespaces routinely screws up all permissions so don't complain there.
|
|
return if ENV["CODESPACES"] || ENV["HOMEBREW_CODESPACES"]
|
|
|
|
offending_node(formula_nodes.node)
|
|
actual_mode = File.stat(file_path).mode
|
|
# Check that the file is world-readable.
|
|
if actual_mode & 0444 != 0444
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
|
actual: actual_mode & 0777,
|
|
wanted: "a+r",
|
|
path: file_path)
|
|
end
|
|
# Check that the file is user-writeable.
|
|
if actual_mode & 0200 != 0200
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
|
actual: actual_mode & 0777,
|
|
wanted: "u+w",
|
|
path: file_path)
|
|
end
|
|
# Check that the file is *not* other-writeable.
|
|
return if actual_mode & 0002 != 002
|
|
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
|
actual: actual_mode & 0777,
|
|
wanted: "o-w",
|
|
path: file_path)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|