Insecure world writable dir

Question

I can't figure out how to fix this, apparently ruby doesn't like anything in my home directory.

/Users/Connor/.rvm/rubies/ree-1.8.7-2010.01/bin/gem:4: warning: Insecure world writable dir /Users/Connor/.rvm/rubies/ree-1.8.7-2010.01/bin in PATH, mode 040766

How can I fix this?

score 3 · Accepted Answer · answered Apr 13 '10 at 21:09

3

chmod -R o-w ~/.rvm

answered Apr 13 '10 at 21:09

Translated for folks that don't do octal: remove the world-write bit. – Avery Payne Apr 05 '12 at 01:26

score 2 · Answer 2 · answered Apr 13 '10 at 21:08

Note that this is just a warning, and Ruby should still run even with this Warning message.

It appears that /Users/Connor/.rvm/rubies/ree-1.8.7-2010.01/bin has permissions 766, which probably looks like this:

drwxrw-rw- 2 connor yourgroup 68 Apr 13 14:03 bin

This is not secure, because it means anyone with access to your system could install files under /Users/Connor/.rvm/rubies/ree-1.8.7-2010.01/bin, and you might execute those unknown files by accident.

Run this command from the commandline:

chmod go-rw /Users/Connor/.rvm/rubies/ree-1.8.7-2010.01/bin

This will disallow anyone but you from writing to and reading from that directory.

Brennan · Answer 3 · 2012-04-04T23:32:38.663

0

Your umask settings are likely improperly set, enabling files to be created with less than secure settings.

The other solutions posted were about fixing the permissions issue, but not fixing the umask issue that is likely a part of it.

edited Apr 04 '12 at 23:32

answered Apr 13 '10 at 22:15

Brennan

1,398
6
18

Insecure world writable dir

3 Answers3