From abffb251ac23c2e2f5f594df6c300b8783f9860c Mon Sep 17 00:00:00 2001 From: Brandon Zylstra <brandon.zylstra@gmail.com> Date: Sat, 14 Nov 2015 23:11:43 -0500 Subject: [PATCH] make script executable only for the owner Making files executable for the world opens a potential security risk. It might be unlikely that it can be exploited, but it's a better practice to avoid doing anyway. --- docs/how_to_create_plugin.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/how_to_create_plugin.md b/docs/how_to_create_plugin.md index 19002da..b1a68f9 100644 --- a/docs/how_to_create_plugin.md +++ b/docs/how_to_create_plugin.md @@ -27,7 +27,7 @@ directory. That's how plugins are run. Create a plugin run file in plugin directory: $ touch my_plugin.tmux - $ chmod +x my_plugin.tmux + $ chmod u+x my_plugin.tmux You can have more than one `*.tmux` file, and all will get executed. However, usually you'll need just one. @@ -69,7 +69,7 @@ Now that we have the binding, let's create a script that's invoked with $ mkdir scripts $ touch scripts/tmux_list_plugins.sh - $ chmod +x scripts/tmux_list_plugins.sh + $ chmod u+x scripts/tmux_list_plugins.sh And here's the script content: