From b90987fdeb13e1ef9180d6d65fec998aefecfa7d Mon Sep 17 00:00:00 2001 From: Patrick Rose Date: Fri, 9 Feb 2018 10:05:46 +0000 Subject: [PATCH] Fix permissions when using the PearBinaryInstaller The PearBinaryInstaller is old and not used by many people, so the world writable permissions weren't caught --- src/Composer/Installer/PearBinaryInstaller.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Composer/Installer/PearBinaryInstaller.php b/src/Composer/Installer/PearBinaryInstaller.php index d0c63c410..f0d6783bb 100644 --- a/src/Composer/Installer/PearBinaryInstaller.php +++ b/src/Composer/Installer/PearBinaryInstaller.php @@ -61,9 +61,9 @@ class PearBinaryInstaller extends BinaryInstaller { parent::initializeBinDir(); file_put_contents($this->binDir.'/composer-php', $this->generateUnixyPhpProxyCode()); - @chmod($this->binDir.'/composer-php', 0777); + @chmod($this->binDir.'/composer-php', 0777 & ~umask()); file_put_contents($this->binDir.'/composer-php.bat', $this->generateWindowsPhpProxyCode()); - @chmod($this->binDir.'/composer-php.bat', 0777); + @chmod($this->binDir.'/composer-php.bat', 0777 & ~umask()); } protected function generateWindowsProxyCode($bin, $link)