Fix various file permissions to be 644

diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_flat_0_aaaaaa_40x100.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_flat_0_aaaaaa_40x100.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_55_fbf9ee_1x400.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_55_fbf9ee_1x400.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_65_ffffff_1x400.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_65_ffffff_1x400.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_75_dadada_1x400.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_75_dadada_1x400.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_75_e6e6e6_1x400.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_glass_75_e6e6e6_1x400.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_highlight-soft_75_cccccc_1x100.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-bg_highlight-soft_75_cccccc_1x100.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_222222_256x240.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_222222_256x240.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_2e83ff_256x240.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_2e83ff_256x240.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_454545_256x240.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_454545_256x240.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_888888_256x240.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_888888_256x240.png
...
diff --git a/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_cd0a0a_256x240.png b/core/assets/vendor/jquery.ui/themes/base/images/ui-icons_cd0a0a_256x240.png

we shouldnt touch vendor, right?

removed core/vendor/ and i think svgs can be executable.

I'm at Drupal con #LatinAmerica2015.

Checked the files permissions listed on comment #2's patch before applying it on head version of Drupal 8. All the files had Execute permissions.

Applied patch posted on comment #2. Files no longer have Execute permissions.

Patch worked correctly.

i think svgs can be executable.

nah. why would one need to execute an svg ;)

I'm also at Drupal Con #LatinAmerica2015

I used the find command on Linux to find if the issue was still present on the latest Drupal 8 version, checked HEAD and still existed. In case you need to make that sort of revision again, we are excluding the core folder as pointed out by ParisLiakos, the command I used is:

find -executable -name '*.php' | grep -v "core/vendor"
The result is:

$ find  -executable -name '*.php' | grep -v "core/vendor"
./core/modules/system/src/Tests/Database/DeleteTruncateTest.php
./core/modules/ban/src/BanIpManagerInterface.php
./core/modules/block/src/BlockRepository.php
./core/modules/block/tests/src/Unit/BlockRepositoryTest.php

After applying the patch in number #2 and re-running the command the issue seems to be gone, so I think it's ready to be commited.

I am also in DrupalCon LatinAmerica2015 and I also confirmed the RTBC works.

I included regular files, so that even the static files (svg, gif, jpg, css, etc) don't get included if they have those permissions, the updated command is the following:

find ./ -regextype posix-awk -regex "(.*.php|.*.jpg|.*.png|.*.gif|.*.css|.*.svg*)" -executable -type f | grep -v "core/vendor"

You can change the permissions on the fly by using a call to xargs:
find ./ -regextype posix-awk -regex "(.*.php|.*.jpg|.*.png|.*.gif|.*.css|.*.svg*)" -executable -type f | grep -v "core/vendor" | xargs chmod a-x

I include the updated patch for review.

yes, that seems to do the trick
Thanks!

nah. why would one need to execute an svg ;)

O ya my bad :) svg can have JS but it doesn't have to be executable.

Nice catch, thanks for the fixes, and for all the thorough research!

Committed and pushed to 8.0.x. Thanks!