[opensuse-buildservice] rpmlint 08-check-permissions fails on 11.1, but not on Factory
Hi, in my cdrtools package, I have following line in the .spec file: | %verify(not mode)%attr(0711,root,root)/usr/bin/cdrecord plus a /etc/permissions.d/cdrecord.easy | /usr/bin/cdrecord root.root 4711 and a /etc/permissions.d/cdrecord.secure | /usr/bin/cdrecord root.root 0711 Building for openSUSE 11.1, this causes rpmlint to issue following error message: | ... running 08-check-permissions | ... testing for modified permissions | -------------------------------------------------------------------- | package: cdrecord | SuSEconfig.permissions modified files that are not properly handled! | this will break rpm -V, ask ro for details. | diff for both runs of rpm -V: | -/usr/bin/cdrecord should be root:root 0755. (wrong permissions 0711) | +/usr/bin/cdrecord should be root:root 0755. (wrong permissions 4711) | -------------------------------------------------------------------- Interestingly, there is no such error for openSUSE 11.0 and Factory. Any hints? best regards Henning -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Mon, Oct 26, 2009 at 08:35:45PM +0100, Henning Paul wrote:
Hi,
in my cdrtools package, I have following line in the .spec file:
| %verify(not mode)%attr(0711,root,root)/usr/bin/cdrecord
plus a /etc/permissions.d/cdrecord.easy
| /usr/bin/cdrecord root.root 4711
and a /etc/permissions.d/cdrecord.secure
| /usr/bin/cdrecord root.root 0711
Building for openSUSE 11.1, this causes rpmlint to issue following error message:
| ... running 08-check-permissions | ... testing for modified permissions | -------------------------------------------------------------------- | package: cdrecord | SuSEconfig.permissions modified files that are not properly handled! | this will break rpm -V, ask ro for details. | diff for both runs of rpm -V: | -/usr/bin/cdrecord should be root:root 0755. (wrong permissions 0711) | +/usr/bin/cdrecord should be root:root 0755. (wrong permissions 4711) | --------------------------------------------------------------------
Interestingly, there is no such error for openSUSE 11.0 and Factory.
Any hints?
The permissions of 11.1 might still contain cdrecord with 0755, at least SLES 10 does. Not sure which file is used first in this case, but snippets should have worked in 11.1 already. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
Hi,
On 10/26/2009 at 20:35, Henning Paul <hnch@gmx.net> wrote: | package: cdrecord | SuSEconfig.permissions modified files that are not properly handled! | this will break rpm -V, ask ro for details. | diff for both runs of rpm -V: | -/usr/bin/cdrecord should be root:root 0755. (wrong permissions 0711) | +/usr/bin/cdrecord should be root:root 0755. (wrong permissions 4711) | --------------------------------------------------------------------
As far as I remember you needed some magic in the scripts: %post %run_permissions %verifyscript %verify_permissions This makes sure that the entire SuSEconfig magic for permissions is handled properly. Dominique -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
Henning Paul wrote:
| ... running 08-check-permissions | ... testing for modified permissions | -------------------------------------------------------------------- | package: cdrecord | SuSEconfig.permissions modified files that are not properly handled! | this will break rpm -V, ask ro for details. | diff for both runs of rpm -V: | -/usr/bin/cdrecord should be root:root 0755. (wrong permissions 0711) | +/usr/bin/cdrecord should be root:root 0755. (wrong permissions 4711) | --------------------------------------------------------------------
Interestingly, there is no such error for openSUSE 11.0 and Factory.
No idea why it doesn't complain on 11.0, maybe a bug in the check. The error on 11.1 is correct. /etc/permissions says cdrecord should be 0755. 711 doesn't make sense anyways as there's nothing to hide. Just use 755. Also make sure the permissions as defined by %attr match the 'secure' setting. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
participants (4)
-
Dominique Leuenberger -
Henning Paul -
Ludwig Nussel -
Marcus Meissner