[Hackage] #528: Permissions on "cabal fetch" files too tight

[Hackage]

#528: Permissions on "cabal fetch" files too tight
---------------------------------+------------------------------------------
  Reporter:  guest               |        Owner:         
      Type:  defect              |       Status:  new    
  Priority:  low                 |    Milestone:         
 Component:  cabal-install tool  |      Version:  1.6.0.1
  Severity:  minor               |   Resolution:         
  Keywords:                      |   Difficulty:  unknown
Ghcversion:                      |     Platform:         
---------------------------------+------------------------------------------
Old description:

> 13:54 <twb> Why has cabal seemingly ignored my umask and made files in
> /home/twb/.cabal/packages unreadable by the "nobody" user?
> 00:14 <dcoutts> ah, I think I know
> 00:14 <dcoutts> it's the writeFileAtomic function
> 00:14 <dcoutts> are you using Cabal HEAD or 1.6?
> 00:15 <twb> whatever cabal upgrade gave me, I think
> 00:15 <dcoutts> we create a temp file and rename it over the dest
> 00:15 <twb> Probably not HEAD
> 00:15 <dcoutts> but the System.Directory function to create a temp file
> makes it readable only by the current user
> 00:16 <dcoutts> file a ticket, so we don't forget

New description:

 {{{
 13:54 <twb> Why has cabal seemingly ignored my umask and made files in
 /home/twb/.cabal/packages unreadable by the "nobody" user?
 00:14 <dcoutts> ah, I think I know
 00:14 <dcoutts> it's the writeFileAtomic function
 00:14 <dcoutts> are you using Cabal HEAD or 1.6?
 00:15 <twb> whatever cabal upgrade gave me, I think
 00:15 <dcoutts> we create a temp file and rename it over the dest
 00:15 <twb> Probably not HEAD
 00:15 <dcoutts> but the System.Directory function to create a temp file
 makes it readable only by the current user
 00:16 <dcoutts> file a ticket, so we don't forget
 }}}

Comment (by duncan):

 Actually, now I'm not quite sure if this is the cause. Anyway, the thing
 to check is `openNewBinaryFile` in `Distribution.Compat.TempFile`.

-- 
Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/528#comment:1>
Hackage <http://haskell.org/cabal/>
Hackage: Cabal and related projects