mirror of
https://github.com/flatpak/flatpak.git
synced 2026-01-26 16:48:33 -05:00
This canonicalizes the file modes for directories to 0755, and for files to 0755 for executables or 0644 otherwise. This means we never get files/dirs writable by non-root in the system repo, and we never get setuid/setgid/sticky-bit, all which could potentially be a problem if we store them in the system repo. See https://github.com/flatpak/flatpak/pull/837 for some discussion about this.