[Bug 176253] Review Request: clement-2.1
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: Review Request: clement-2.1
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=176253
------- Additional Comments From jmp(a)safe.ca 2006-08-14 08:04 EST -------
Seems I do not explain myself right...
%{_usr}/bin/%{name} MUST be own by 'somebody' else than root to have clement to
know, once started, under which ID it must run (the application look about
the file ownership and say 'ok lets seteuid to this'), if the application
is not setuid the only other way is to hard code the effective uid, this is
not good from my stand point. I choosed 'mail' because this ID is used by
related application. I want to give possibility to change this on the fly
by local sysadmin.
useradd and groupadd clement where part of the original implementation but
removed to comply to rpmlint.
If rpmlint is a reference tools to 'the right way to do something' warning
can't ignore. IMHO rpmlint warning are 'you are doing something which can work
but are against established standard'.
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
17 years, 9 months
[Bug 176253] Review Request: clement-2.1
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: Review Request: clement-2.1
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=176253
------- Additional Comments From j.w.r.degoede(a)hhs.nl 2006-08-14 03:40 EST -------
(In reply to comment #16)
> I think datadir is not a problem, I need to double check with the PHP person,
> should be fixed in the next version.
>
> clement is not 'setuid' but must be root open < 1024 port.
> such the Clement daemon is started as root and clement take
> the application ownership to become a standard user mail
> to avoid the have a daemon with root priviledge open on the
> (wild) outside.
I understand, but then the %{_usr}/bin/%{name} file doesn't have the be owned by
mail.mail and could be just root.root, right?
My real question al allong has been why is %{_usr}/bin/%{name} owned by mail.mail?
> I would rather have a "clement" username but
> rpmlint seems to be rather reluctant to 'give/declare' new
> username.
>
Thats possible, add the following lines (at the appropiate places):
Requires(pre): /usr/sbin/useradd, /usr/sbin/groupadd
%pre
/usr/sbin/groupadd -r clement 2> /dev/null || :
/usr/sbin/useradd -s /sbin/nologin -M -d / -c "Clement daemon" -r -g clement \
clement 2> /dev/null || :
And then you can use %attr (-,clement,clement) in %files. You will ofcourse also
need to patch the daemon to drop its root rights to the user clement instead of
mail.
This might generatre some rpmlint warnings but these may be ignored.
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
17 years, 9 months
[Bug 187317] Review Request: mindi
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: Review Request: mindi
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187317
dennis(a)ausil.us changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
Flag| |needinfo?(bruno.cornec(a)hp.co
| |m)
------- Additional Comments From dennis(a)ausil.us 2006-08-13 23:52 EST -------
remove the %post section. You cant have that kind of output
you have binary statically linked files that you don't build this is very bad
as one you shouldn't have anything statically linked, it should not be
prebuilt, extras packages support multiple arches those files will not run on
ppc or sparc for instance. they will run on x86_64 but 64 bit binaries are
preferred.
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
17 years, 9 months
[Bug 182320] Review Request: gnome-build
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: Review Request: gnome-build
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182320
------- Additional Comments From jpmahowald(a)gmail.com 2006-08-13 23:28 EST -------
Given that -fPIC is being passed let's ignore shlib-with-non-pic-code.
A couple things yet to address:
Needs work:
- Fix the cp line in %install to a %doc macro or explain why it's needed.
- missing smp flags or a note on why not needed (was in 0.1.2-2 ?)
Recommend:
* Changing URL to http://www.gnome.org/projects/devtools/gnomebuild.shtml
Good:
+ license (GPL)
+ sources good
+ builds on devel x86_64
+ %find_lang macro
+ version-release good, is latest
+ macros used consistently
+ proper -devel subpackage
+ %clean good
+ ldconfig good
+ proper file ownership
+ proper permissions
+ removed .la files
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
17 years, 9 months
[Bug 176253] Review Request: clement-2.1
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: Review Request: clement-2.1
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=176253
------- Additional Comments From jmp(a)safe.ca 2006-08-13 19:07 EST -------
I think datadir is not a problem, I need to double check with the PHP person,
should be fixed in the next version.
clement is not 'setuid' but must be root open < 1024 port.
such the Clement daemon is started as root and clement take
the application ownership to become a standard user mail
to avoid the have a daemon with root priviledge open on the
(wild) outside. I would rather have a "clement" username but
rpmlint seems to be rather reluctant to 'give/declare' new
username.
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
17 years, 9 months