FilesExpand file tree

main

/

after-pack.cjs

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

46 lines (39 loc) · 2.09 KB

main

/

after-pack.cjs

Copy path

Top

File metadata and controls

• Code
• Blame

46 lines (39 loc) · 2.09 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

// electron-builder afterPack hook: make the packaged Linux app world-readable.

//

// Files installed or generated under a restrictive umask keep modes without

// world-read: node_modules as npm installed them (the asar-unpacked native

// modules), build output, and the directories electron-builder creates. dpkg

// installs those modes verbatim, which leaves a `/opt/Parallel Code` the desktop

// user cannot enter.

//

// Runs after the app is packed and before the deb and AppImage targets read it.

// Files the targets generate themselves (the desktop entry, changelog) come

// later and are covered by the `umask 022` in the `build` script instead.

const fs = require('fs');

const path = require('path');

// Directories 755; files 644, or 755 where the owner could already execute them,

// so no file becomes executable that its owner could not already execute. This

// clears setuid, setgid and sticky bits; the packed tree has none (chrome-sandbox

// is packed 0755, and the deb's postinst sets 4755 only on systems without user

// namespaces). Symlinks carry no mode of their own and lchmod is not portable, so

// they are left alone. A mode that is already right is not rewritten.

function normalizePermissions(target) {

const stat = fs.lstatSync(target);

if (stat.isSymbolicLink()) return;

const wanted = stat.isDirectory() || stat.mode & 0o100 ? 0o755 : 0o644;

if ((stat.mode & 0o7777) !== wanted) fs.chmodSync(target, wanted);

if (stat.isDirectory()) {

for (const entry of fs.readdirSync(target)) {

normalizePermissions(path.join(target, entry));

}

}

}

exports.default = async function afterPack(context) {

if (context.electronPlatformName !== 'linux') return;

normalizePermissions(context.appOutDir);

// fpm reads the menu icon from the build resources directory directly, so its

// modes reach the package too. This changes modes in the checkout's build/;

// git records only the executable bit, which is kept, so no diff results.

const buildResources = context.packager.buildResourcesDir;

if (buildResources && fs.existsSync(buildResources)) normalizePermissions(buildResources);

};