在PATH中获得“不安全的世界可写dir / home / chance”,在Ubuntu 10.10中为Rails和Gem创build模式040777

我试过这个,但它没有工作,似乎是为OSX。 我有一个新鲜的Ubuntu 10.10(x64)与rvm,rails 3和ruby 1.9.2安装。 我有一个新的导轨应用程序,但使用gem或导轨导致以下警告(滞后)。

$ rails -v

/home/chance/.rvm/gems/ruby-1.9.2-p180@global/gems/railties-3.0.5/lib/rails/script_rails_loader.rb:11: warning: Insecure world writable dir /home/chance in PATH, mode 040777 /home/chance/.rvm/gems/ruby-1.9.2-p180@global/gems/bundler-1.0.10/lib/bundler/runtime.rb:136: warning: Insecure world writable dir /home/chance in PATH, mode 040777 Rails 3.0.5 

$ gem -v

 /home/chance/.rvm/rubies/ruby-1.9.2-p180/bin/gem:4: warning: Insecure world writable dir /home/chance in PATH, mode 040777 1.6.2 

只要事情重要,这里是我的Gemfile:

 source 'http://rubygems.org' gem 'rails' # Bundle edge Rails instead: # gem 'rails', :git => 'git://github.com/rails/rails.git' gem 'sqlite3' gem 'sqlite3-ruby', :require => 'sqlite3' gem "haml" gem "formtastic" gem "will_paginate" gem "devise" gem "delayed_job" gem "whenever" gem "memcache-client" gem "capistrano" group :testing do gem "rspec" gem "rspec-rails" gem "autotest-standalone" gem "autotest-rails" gem "autotest-growl" gem "mocha" gem "shoulda" gem "factory_girl_rails" end group :development do gem "cheat" gem "bullet" gem "ruby-growl" end 

该消息表明目录/home/chance可以被所有人写入,这是一个潜在的安全漏洞。 这可能允许恶意用户将文件放入该目录,然后该目录的所有者可能意外地使用。

要修复,请从/home/chance删除世界可写的位:

 $ chmod ow /home/chance 

如果你不是/home/chance的所有者,你将需要通过sudo以root身份执行此操作:

 $ sudo chmod ow /home/chance