Also unset SUID and SGID flags on extracted files, to prevent issues …

…like https://trac.sagemath.org/ticket/20870#
sagemath · Jun 30, 2016 · 66d67dc · 66d67dc
1 parent c6ce4aa
commit 66d67dc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/build/bin/sage-uncompress-spkg b/build/bin/sage-uncompress-spkg
@@ -31,6 +31,7 @@ from __future__ import print_function
 import argparse
 import copy
 import os
+import stat
 import sys
 import tarfile
 import zipfile
@@ -115,6 +116,7 @@ class SageTarFile(tarfile.TarFile):
     def chmod(self, tarinfo, target):
         tarinfo = copy.copy(tarinfo)
         tarinfo.mode &= ~self.umask
+        tarinfo.mode &= ~(stat.S_ISUID | stat.S_ISGID)
         return super(SageTarFile, self).chmod(tarinfo, target)
 
     def extractall(self, path='.', members=None):