-
-
Notifications
You must be signed in to change notification settings - Fork 2.8k
Comparing changes
Open a pull request
base repository: pytest-dev/pytest
base: 6.2.2
head repository: pytest-dev/pytest
compare: 6.2.3
- 9 commits
- 11 files changed
- 3 contributors
Commits on Jan 25, 2021
-
Merge pull request #8275 from pytest-dev/release-6.2.2
Prepare release 6.2.2
Configuration menu - View commit details
-
Copy full SHA for 8220eca - Browse repository at this point
Copy the full SHA 8220ecaView commit details
Commits on Jan 27, 2021
-
Merge pull request #8280 from xuhdev/module
Doc: Move the module declaration to index.rst
Configuration menu - View commit details
-
Copy full SHA for 56e4392 - Browse repository at this point
Copy the full SHA 56e4392View commit details -
Merge pull request #8285 from nicoddemus/backport-8280
[6.2.x] Doc: Move the module declaration to index.rst
Configuration menu - View commit details
-
Copy full SHA for 12e7db8 - Browse repository at this point
Copy the full SHA 12e7db8View commit details
Commits on Apr 3, 2021
-
Configuration menu - View commit details
-
Copy full SHA for 02fdbe2 - Browse repository at this point
Copy the full SHA 02fdbe2View commit details -
pathlib: inline ensure_reset_dir()
This is only used in TempPathFactory.getbasetemp(). We'll be wanting further control/care there, so move it into there.
Configuration menu - View commit details
-
Copy full SHA for 93dbae2 - Browse repository at this point
Copy the full SHA 93dbae2View commit details -
tmpdir: fix temporary directories created with world-readable permiss…
…ions (Written for a Unix system, but might be applicable to Windows as well). pytest creates a root temporary directory under /tmp, named `pytest-of-<username>`, and creates tmp_path's and other under it. /tmp is shared between all users of the system. This root temporary directory was created with 0o777&~umask permissions, which usually becomes 0o755, meaning any user in the system could list and read the files, which is undesirable. Use 0o700 permissions instead. Also for subdirectories, because the root dir is adjustable.
Configuration menu - View commit details
-
Copy full SHA for 9dc54f7 - Browse repository at this point
Copy the full SHA 9dc54f7View commit details -
tmpdir: prevent using a non-private root temp directory
pytest uses a root temp directory named `/tmp/pytest-of-<username>`. The name is predictable, and the directory might already exists from a previous run, so that's allowed. This makes it possible for my_user to pre-create `/tmp/pytest-of-another_user`, thus giving my_user control of another_user's tempdir. Prevent this scenario by adding a couple of safety checks. I believe they are sufficient. Testing the first check requires changing the owner, which requires root permissions, so can't be unit-tested easily, but I checked it manually.
Configuration menu - View commit details
-
Copy full SHA for 822686e - Browse repository at this point
Copy the full SHA 822686eView commit details -
Merge pull request #8517 from bluetech/backport-mktmp
[6.2.x] Fix minor temporary directory security issue
Configuration menu - View commit details
-
Copy full SHA for 138b19a - Browse repository at this point
Copy the full SHA 138b19aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 3a2fd96 - Browse repository at this point
Copy the full SHA 3a2fd96View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 6.2.2...6.2.3