[opensuse-factory] Tumbleweed build problems for filesystem.rpm
Hi all, I'm getting the following build errors when building the filesystem package (needed for the latest udev): -------------------------------------------------------------------- package: filesystem SuSEconfig.permissions modified files that are not properly handled! this will break rpm -V, ask ro for details. diff for both runs of rpm -V: +.M....... /var/crash -------------------------------------------------------------------- You can see this in the link here: https://build.opensuse.org/package/live_build_log?arch=i586&package=filesystem&project=openSUSE%3ATumbleweed&repository=standard Any ideas of how I can resolve this? thanks, greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Ah, just realized the error message told me who to email about this. Ruediger, any ideas about the error below? thanks, greg k-h On Mon, Oct 17, 2011 at 10:25:52AM -0700, Greg KH wrote:
Hi all,
I'm getting the following build errors when building the filesystem package (needed for the latest udev):
-------------------------------------------------------------------- package: filesystem SuSEconfig.permissions modified files that are not properly handled! this will break rpm -V, ask ro for details. diff for both runs of rpm -V: +.M....... /var/crash --------------------------------------------------------------------
You can see this in the link here: https://build.opensuse.org/package/live_build_log?arch=i586&package=filesystem&project=openSUSE%3ATumbleweed&repository=standard
Any ideas of how I can resolve this?
thanks,
greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
So we have to take the file permissions out of the normal verification of rpm and to plug the now opened problem that the permissions for these files/directories would not be checked at all, we have to add measures so that the permissions are checked according to the permission policy in place at the time when the "rpm -V ..." is called. So in the filelist, you can use "%verify(not mode) $filename" and to plug the hole, use --- %verifyscript %verify_permissions -e $filename --- (note that this is not part of %post or any of these but %verifyscript is a section/script by itself). Okay, last step: we want to make sure this file/directory permission does already match the current permission policy after installing the package: in the %post section, we add something like this: ------------------- %post %if 0%{?suse_version} > 1130 %set_permissions $filename %else %run_permissions %endif ------------------- (after 11.3, Ludwig reworked the macros, so that the permissions of this file are set directly instead of the older %run_permissions which actually just called the SuSEconfig.permissions module). To complete the story, please add a "PreReq: permissions" (or for those preferring the newer syntax: "Requires(post): permissions". See also: http://lizards.opensuse.org/2010/11/24/updated-permissions-handling-in-11-4/ http://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#.25set_perm...
thanks,
greg k-h
On Mon, Oct 17, 2011 at 10:25:52AM -0700, Greg KH wrote:
Hi all,
I'm getting the following build errors when building the filesystem package (needed for the latest udev):
-------------------------------------------------------------------- package: filesystem SuSEconfig.permissions modified files that are not properly handled! this will break rpm -V, ask ro for details. diff for both runs of rpm -V: +.M....... /var/crash --------------------------------------------------------------------
You can see this in the link here: https://build.opensuse.org/package/live_build_log?arch=i586&package=filesystem&project=openSUSE%3ATumbleweed&repository=standard
Any ideas of how I can resolve this?
thanks,
greg k-h
-- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro@suse.com,ro@suse.de,bugfinder@t-online.de) ------------------------------------------------------------------------- Linux T410Rudi 3.1.0-rc7-3-desktop #1 SMP PREEMPT Wed Sep 28 14:41:36 UTC 2011 (50fb02f) x86_64 Key fingerprint = 17DC 6553 86A7 384B 53C5 CA5C 3CE4 F2E7 23F2 B417 SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Mon, Oct 17, 2011 at 11:57:19PM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
Yes, but why is this working in Factory and 12.1, but not in 11.4? What changed in the core somewhere?
So we have to take the file permissions out of the normal verification of rpm and to plug the now opened problem that the permissions for these files/directories would not be checked at all, we have to add measures so that the permissions are checked according to the permission policy in place at the time when the "rpm -V ..." is called.
So in the filelist, you can use "%verify(not mode) $filename" and to plug the hole, use --- %verifyscript %verify_permissions -e $filename --- (note that this is not part of %post or any of these but %verifyscript is a section/script by itself).
Okay, last step: we want to make sure this file/directory permission does already match the current permission policy after installing the package: in the %post section, we add something like this: ------------------- %post %if 0%{?suse_version} > 1130 %set_permissions $filename %else %run_permissions %endif ------------------- (after 11.3, Ludwig reworked the macros, so that the permissions of this file are set directly instead of the older %run_permissions which actually just called the SuSEconfig.permissions module).
To complete the story, please add a "PreReq: permissions" (or for those preferring the newer syntax: "Requires(post): permissions".
Shouldn't that go into the package in Base:System then, so it continues to build on all distros? thanks, greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday, October 17, 2011 03:49:31 PM Greg KH wrote:
On Mon, Oct 17, 2011 at 11:57:19PM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
Yes, but why is this working in Factory and 12.1, but not in 11.4? What changed in the core somewhere?
well, actually I can not see /var/crash in any of the permissions files, neither in factory nor in 11.4 and the link with the package build log you sent before shows a succeeded package ? [...]
Shouldn't that go into the package in Base:System then, so it continues to build on all distros?
I just do not see it failing right now ... (otherwise I have no real issues with such a fix if it's needed) -- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro@suse.com,ro@suse.de,bugfinder@t-online.de) ------------------------------------------------------------------------- Linux T410Rudi 3.1.0-rc7-3-desktop #1 SMP PREEMPT Wed Sep 28 14:41:36 UTC 2011 (50fb02f) x86_64 Key fingerprint = 17DC 6553 86A7 384B 53C5 CA5C 3CE4 F2E7 23F2 B417 SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Tue, Oct 18, 2011 at 01:36:07AM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 03:49:31 PM Greg KH wrote:
On Mon, Oct 17, 2011 at 11:57:19PM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
Yes, but why is this working in Factory and 12.1, but not in 11.4? What changed in the core somewhere?
well, actually I can not see /var/crash in any of the permissions files, neither in factory nor in 11.4 and the link with the package build log you sent before shows a succeeded package ?
I patched the permissions file to be 1777, like it used to be in 11.4, and it built properly. But the package in Base:System is not that way.
[...]
Shouldn't that go into the package in Base:System then, so it continues to build on all distros?
I just do not see it failing right now ... (otherwise I have no real issues with such a fix if it's needed)
Try to build the Base:System/filesystem package for 11.4 right now and you will see the error. thanks, greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Greg KH wrote:
On Tue, Oct 18, 2011 at 01:36:07AM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 03:49:31 PM Greg KH wrote:
On Mon, Oct 17, 2011 at 11:57:19PM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
Yes, but why is this working in Factory and 12.1, but not in 11.4? What changed in the core somewhere?
well, actually I can not see /var/crash in any of the permissions files, neither in factory nor in 11.4 and the link with the package build log you sent before shows a succeeded package ?
I patched the permissions file to be 1777, like it used to be in 11.4, and it built properly.
But the package in Base:System is not that way.
/var/crash is no longer 1777 (ie yet another /tmp) in Factory. Historical mistake corrected by removing entry from /etc/permissions.
[...]
Shouldn't that go into the package in Base:System then, so it continues to build on all distros?
I just do not see it failing right now ... (otherwise I have no real issues with such a fix if it's needed)
Try to build the Base:System/filesystem package for 11.4 right now and you will see the error.
Well, filesystem.rpm just like permissions.rpm are core components of the distro and define how things are done. They are not leaf packages you can simply isolate on an older distro. In this case you have to apply the change for /var/crash in both filesystem.rpm and permissions.rpm at the same time or none of them. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Tue, Oct 18, 2011 at 11:03:06AM +0200, Ludwig Nussel wrote:
Greg KH wrote:
On Tue, Oct 18, 2011 at 01:36:07AM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 03:49:31 PM Greg KH wrote:
On Mon, Oct 17, 2011 at 11:57:19PM +0200, Ruediger Oertel wrote:
On Monday, October 17, 2011 12:06:48 PM Greg KH wrote:
Ah, just realized the error message told me who to email about this.
Ruediger, any ideas about the error below? looks like /var/crash has different permissions between /etc/permissions.local and /etc/permissions.secure (or similar for other permissions.*). This leads to issues when you want to verify the package via "rpm -V $packagename".
Yes, but why is this working in Factory and 12.1, but not in 11.4? What changed in the core somewhere?
well, actually I can not see /var/crash in any of the permissions files, neither in factory nor in 11.4 and the link with the package build log you sent before shows a succeeded package ?
I patched the permissions file to be 1777, like it used to be in 11.4, and it built properly.
But the package in Base:System is not that way.
/var/crash is no longer 1777 (ie yet another /tmp) in Factory. Historical mistake corrected by removing entry from /etc/permissions.
[...]
Shouldn't that go into the package in Base:System then, so it continues to build on all distros?
I just do not see it failing right now ... (otherwise I have no real issues with such a fix if it's needed)
Try to build the Base:System/filesystem package for 11.4 right now and you will see the error.
Well, filesystem.rpm just like permissions.rpm are core components of the distro and define how things are done. They are not leaf packages you can simply isolate on an older distro. In this case you have to apply the change for /var/crash in both filesystem.rpm and permissions.rpm at the same time or none of them.
Then shouldn't there be some type of dependancy between the two packages so that those of us who didn't know that (i.e. me) would have a chance to figure this out? :) thanks, greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (3)
-
Greg KH -
Ludwig Nussel -
Ruediger Oertel