Yelp/aactivator

Checks for group permission despise not mentioned in the docs

Closed this issue · 1 comments

Hey im trying to use aactivator with zsh on ubuntu 22.04

I setup a venv in my project with virtualenv venv and then created a symlink with ln -s venv/bin/activate .activate.sh

But aactivator is then telling me that its cowardly refusing to source .activate.sh because it is writable by others.
But permissions of venv/bin/activate are 0664

In the code here

elif pathstat & (stat.S_IWGRP | stat.S_IWOTH):
the security checks not only for write permissions of others (stat.S_IWOTH) but also if the group can write (stat.S_IWGRP).

This is not mentioned in the docs and also the error message is misleading.

Is this intended? Or am i just not seeing something?

I followed the steps shown here https://youtu.be/q8DkatMZvUs?t=1519

people in a group are other people