{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/28157","labels_url":"https://api.github.com/repos/saltstack/salt/issues/28157/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/28157/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/28157/events","html_url":"https://github.com/saltstack/salt/issues/28157","id":112466566,"number":28157,"title":"Files pushed to master with cp.push become world readable","user":{"login":"moloney","id":1376566,"avatar_url":"https://avatars.githubusercontent.com/u/1376566?v=3","gravatar_id":"","url":"https://api.github.com/users/moloney","html_url":"https://github.com/moloney","followers_url":"https://api.github.com/users/moloney/followers","following_url":"https://api.github.com/users/moloney/following{/other_user}","gists_url":"https://api.github.com/users/moloney/gists{/gist_id}","starred_url":"https://api.github.com/users/moloney/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moloney/subscriptions","organizations_url":"https://api.github.com/users/moloney/orgs","repos_url":"https://api.github.com/users/moloney/repos","events_url":"https://api.github.com/users/moloney/events{/privacy}","received_events_url":"https://api.github.com/users/moloney/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-20T21:41:15Z","updated_at":"2015-10-20T22:28:58Z","closed_at":null,"body":"The directory /var/cache/salt/master/minions/ is currently world readable, and any files that get pushed there with cp.push end up world readable regardless of their original permissions.  This allows any unprivileged user on the master node to read any of these files, which could be a security issue."},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/149721034","html_url":"https://github.com/saltstack/salt/issues/28157#issuecomment-149721034","issue_url":"https://api.github.com/repos/saltstack/salt/issues/28157","id":149721034,"user":{"login":"iggy","id":20441,"avatar_url":"https://avatars.githubusercontent.com/u/20441?v=3","gravatar_id":"","url":"https://api.github.com/users/iggy","html_url":"https://github.com/iggy","followers_url":"https://api.github.com/users/iggy/followers","following_url":"https://api.github.com/users/iggy/following{/other_user}","gists_url":"https://api.github.com/users/iggy/gists{/gist_id}","starred_url":"https://api.github.com/users/iggy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iggy/subscriptions","organizations_url":"https://api.github.com/users/iggy/orgs","repos_url":"https://api.github.com/users/iggy/repos","events_url":"https://api.github.com/users/iggy/events{/privacy}","received_events_url":"https://api.github.com/users/iggy/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T22:28:58Z","updated_at":"2015-10-20T22:28:58Z","body":"Not everything in that dir is world readable. I personally think it's a documentation issue."}}