From abffb251ac23c2e2f5f594df6c300b8783f9860c Mon Sep 17 00:00:00 2001
From: Brandon Zylstra <brandon.zylstra@gmail.com>
Date: Sat, 14 Nov 2015 23:11:43 -0500
Subject: [PATCH] make script executable only for the owner

Making files executable for the world opens a potential security risk.  It might be unlikely that it can be exploited, but it's a better practice to avoid doing anyway.
---
 docs/how_to_create_plugin.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/how_to_create_plugin.md b/docs/how_to_create_plugin.md
index 19002da..b1a68f9 100644
--- a/docs/how_to_create_plugin.md
+++ b/docs/how_to_create_plugin.md
@@ -27,7 +27,7 @@ directory. That's how plugins are run.
 Create a plugin run file in plugin directory:
 
     $ touch my_plugin.tmux
-    $ chmod +x my_plugin.tmux
+    $ chmod u+x my_plugin.tmux
 
 You can have more than one `*.tmux` file, and all will get executed. However, usually
 you'll need just one.
@@ -69,7 +69,7 @@ Now that we have the binding, let's create a script that's invoked with
 
     $ mkdir scripts
     $ touch scripts/tmux_list_plugins.sh
-    $ chmod +x scripts/tmux_list_plugins.sh
+    $ chmod u+x scripts/tmux_list_plugins.sh
 
 And here's the script content: