This was reported to my personal mail by Matthias Kilian.
In the darcs 2.4.1 tarball, the regular files have 0600 (owner may read and
write, no rights for others) as the permission bits, where 0644 (owner may
write, everyone may read) would be more logical. In the working copy of the
repo that I created the tarball from, it *is* actually 0644. The files already
had the wrong permissions in the 2.4 tarball.
Our tarballs are made by 'cabal sdist' via the 'release/release.sh' script.
The latter script does not contain any suspicious activity wrt to permissions
as far as I can judge.
|