Warning while installing the rails plugin

Question

Hi...I am getting the following warning while installing any plugin in my rails application.

/usr/local/lib/ruby/gems/1.9.1/gems/activesupport-2.3.5/lib/active_support/core_ext/kernel/agnostics.rb:7: warning: Insecure world writable dir /usr/local/bin in PATH, mode 040777

Can someone please tell me how to solve this problem? Thanks

Answer 1

This is due to the fact that /usr/local/bin is writable by your application when maybe it shouldn't. You can fix this by changing the permissions on this directory.

Answer 2

Ruby (on all Unixes, including Cygwin) warns if you try to run an external program and your $PATH contains a world-writable directory. It doesn't just check the directories on $PATH: it checks each of their parents, too, because if /usr/local (say) is world-writeable, /usr/local/bin is subverted as easily as if it were writeable itself.

A work-around could be to remove "other" write permission from the relevant directories.

For instance:

• chmod o-w /usr/local/bin
• chmod o-w /usr/local
• chmod o-w /cygdrive/c