summary refs log tree commit diff
path: root/tests/publish.scm
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2020-11-08 23:35:45 +0100
committerLudovic Courtès <ludo@gnu.org>2020-11-08 23:39:33 +0100
commit464e7437f46e7c4199fa98dcc52b4d46e8d8a48e (patch)
treeebb1a7a3e93296c0c660a2583dd2b15ba5e60b2c /tests/publish.scm
parent495acfc56602c1bd768d470256704cf1ff80540a (diff)
downloadguix-464e7437f46e7c4199fa98dcc52b4d46e8d8a48e.tar.gz
publish: Create files in the cache as #o644.
Reported by Ricardo Wurmus <rekado@elephly.net>.

* guix/scripts/publish.scm (compress-nar): Add 'chmod' call to ensure
PORT is #o644, in the uncompressed case.
(bake-narinfo+nar): Likewise for the narinfo file.
* tests/publish.scm ("with cache"): Check permissions on CACHED and NAR.
Diffstat (limited to 'tests/publish.scm')
-rw-r--r--tests/publish.scm5
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/publish.scm b/tests/publish.scm
index e46e6256b7..cafd0f13a2 100644
--- a/tests/publish.scm
+++ b/tests/publish.scm
@@ -434,6 +434,11 @@ References: ~%"
                  (< ttl 3600)))
 
               (wait-for-file cached)
+
+              ;; Both the narinfo and nar should be world-readable.
+              (= #o644 (stat:perms (lstat cached)))
+              (= #o644 (stat:perms (lstat nar)))
+
               (let* ((body         (http-get-port url))
                      (compressed   (http-get nar-url))
                      (uncompressed (http-get (string-append base "nar/"