10/14

PACKAGE_SCOPES.txt

@@ -35,6 +35,13 @@ SYS (GL_SCOPE_SYS)
     System-wide packages, not owned by any particular uid:
         /glacier/sys/{index,store,links,stage,old,lock}
     Symlink destination depends on the package's repo (see section 3).
+    Root-owned and world-READABLE, like /usr: index/store/links, the
+    store's repo/name/version dirs and implicit parent dirs are 0755,
+    index files 0644 (gl_scope_dir_mode / gl_scope_file_mode). /usr's
+    links point into the store, so every user must be able to traverse
+    it, and user-scope dependency checks read the system index. The
+    modes are applied explicitly, not left to syspkg's umask. The lock
+    stays 0600; .displaced, .etc-state and backup/ stay 0700.
     Requires root. gpkg enforces this via geteuid() before it will
     even attempt a system-scope operation.