mirror of
https://github.com/Homebrew/brew.git
synced 2025-07-14 16:09:03 +08:00
40 lines
1.4 KiB
Ruby
40 lines
1.4 KiB
Ruby
|
# frozen_string_literal: true
|
||
|
|
|
||
|
|
require "rubocops/extend/formula"
|
||
|
|
|
||
|
|
module RuboCop
|
||
|
|
module Cop
|
||
|
|
module FormulaAudit
|
||
|
|
class Files < FormulaCop
|
||
|
|
def audit_formula(node, _class_node, _parent_class_node, _body_node)
|
||
|
|
return unless file_path
|
||
|
|
|
||
|
|
offending_node(node)
|
||
|
|
actual_mode = File.stat(file_path).mode
|
||
|
|
# Check that the file is world-readable.
|
||
|
|
if actual_mode & 0444 != 0444
|
||
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
||
|
|
actual: actual_mode & 0777,
|
||
|
|
wanted: "+r",
|
||
|
|
path: file_path)
|
||
|
|
end
|
||
|
|
# Check that the file is user-writeable.
|
||
|
|
if actual_mode & 0200 != 0200
|
||
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
||
|
|
actual: actual_mode & 0777,
|
||
|
|
wanted: "u+w",
|
||
|
|
path: file_path)
|
||
|
|
end
|
||
|
|
# Check that the file is *not* other-writeable.
|
||
|
|
return if actual_mode & 0002 != 002
|
||
|
|
|
||
|
|
problem format("Incorrect file permissions (%03<actual>o): chmod %<wanted>s %<path>s",
|
||
|
|
actual: actual_mode & 0777,
|
||
|
|
wanted: "o-w",
|
||
|
|
path: file_path)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|