3 files in rss-glx's docs (FE5 and devel) are world writable. See bug 200794 for background and more info.
rss-glx-0.8.1.p-5 is building for FC5 and Rawhide. The culprit was just copying over source files instead of using install so they files inherited my local (002) umask.
Actually your local umask should not affect anything in the buildsys, but this is most likely an issue with the buildsys having 000 umask when it checks out stuff to build from CVS.
Well, the files were created and checked in with my local umask, CVS tends to retain these permissions, so they propagated into the build system.
CVS remembers only whether the file had executable bits on at initial check in time and retains that status, everything else is forgotten, and decided by the checkouter's umask at checkout time. Besides, your local umask was 002, not 000 ;) $ umask 0022 $ rm README.fedora ; cvs -Q up README.fedora $ ls -l README.fedora | cut -d' ' -f 1 -rw-r--r-- $ umask 000 $ umask 0000 $ rm README.fedora ; cvs -Q up README.fedora $ ls -l README.fedora | cut -d' ' -f 1 -rw-rw-rw-
Agreed.