Feature changed by: Marcus Meissner (msmeissn) Feature #313538, revision 12 Title: Get rid of SuSEconfig.permissions - openSUSE Distribution: Evaluation by engineering manager + openSUSE Distribution: Ready Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system + #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) + Status: everything is basically done already, the file is just left as + a NOP to provide compatbility, Release Notes: SuSEconfig.permissions replaced by chkstat Challenge: (very rough draft) SuSEconfig --module permissions is obsolete / was removed [when this feature is implemented]. Solution: If you want to set the file permissions as defined in /etc/permissions. *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538