[New: openFATE 313538] Get rid of SuSEconfig.permissions
Feature added by: Andreas Jaeger (a_jaeger) Feature #313538, revision 1 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Ludwig Nussel (lnussel) Feature #313538, revision 2 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. + Discussion: + #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) + SuSEconfig.permissions already is a noop when called by SuSEconfig. + It's needed for compatibility with existing rpm macros though. -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Andreas Jaeger (a_jaeger) Feature #313538, revision 3 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. + #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) + Is it possible to change the existing rpm macros? -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Andreas Jaeger (a_jaeger) Feature #313538, revision 4 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? + #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) + Btw. the only usage in spec files in Factory is: samba/samba.spec: + PreReq: /sbin/conf.d/SuSEconfig.permissions -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Ludwig Nussel (lnussel) Feature #313538, revision 5 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions + #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) + https://bugzilla.novell.com/show_bug.cgi?id=764093 -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Christian Boltz (cboltz) Feature #313538, revision 6 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions + #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) + I'm quite sure more packages need it, but don't mention it in their + dependencies ;-) + On my system, at least postfix and yast2-mail drop some files into + /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Christian Boltz (cboltz) Feature #313538, revision 7 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 + #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) + It is also needed for being called manually ;-) + A common usecase, at least for me, is: - add permissions for a file or + directory to /etc/permissions.local (typically for files or directories + that come within a RPM) - run SuSEconfig --module permissions to set + those permissions + Another usecase (once per system) is - set PERMISSION_SECURITY="secure + local" in /etc/sysconfig/security - SuSEconfig --module permissions + This should still be somehow possible after the proposed change. I + don't care too much if the command is named SuSEconfig or make-me-happy. + sh ;-) (as long as the change is documented in the Release Notes), but + it should be possible to apply the permissions from /etc/permissions.* + with a single command. -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Ludwig Nussel (lnussel) Feature #313538, revision 8 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. + #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) + chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Andreas Jaeger (a_jaeger) Feature #313538, revision 9 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by project manager Priority Requester: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. + Relations: + - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Thorsten Kukuk (kukuk) Feature #313538, revision 10 Title: Get rid of SuSEconfig.permissions - openSUSE Distribution: Evaluation by project manager + openSUSE Distribution: Evaluation by engineering manager Priority Requester: Mandatory + Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Christian Boltz (cboltz) Feature #313538, revision 11 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Evaluation by engineering manager Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system + Release Notes: SuSEconfig.permissions replaced by chkstat + Challenge: + (very rough draft) + SuSEconfig --module permissions is obsolete / was removed [when this + feature is implemented]. + Solution: + If you want to set the file permissions as defined in /etc/permissions. + *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Marcus Meissner (msmeissn) Feature #313538, revision 12 Title: Get rid of SuSEconfig.permissions - openSUSE Distribution: Evaluation by engineering manager + openSUSE Distribution: Ready Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system + #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) + Status: everything is basically done already, the file is just left as + a NOP to provide compatbility, Release Notes: SuSEconfig.permissions replaced by chkstat Challenge: (very rough draft) SuSEconfig --module permissions is obsolete / was removed [when this feature is implemented]. Solution: If you want to set the file permissions as defined in /etc/permissions. *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Thorsten Kukuk (kukuk) Feature #313538, revision 13 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Ready Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) Status: everything is basically done already, the file is just left as a NOP to provide compatbility, + #9: Thorsten Kukuk (kukuk) (2012-09-20 13:17:39) (reply to #8) + Coolo told me today that a macro is still calling SUSEconfig and not + chkstat. Release Notes: SuSEconfig.permissions replaced by chkstat Challenge: (very rough draft) SuSEconfig --module permissions is obsolete / was removed [when this feature is implemented]. Solution: If you want to set the file permissions as defined in /etc/permissions. *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Marcus Meissner (msmeissn) Feature #313538, revision 14 Title: Get rid of SuSEconfig.permissions - openSUSE Distribution: Ready + openSUSE Distribution: Done Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) Status: everything is basically done already, the file is just left as a NOP to provide compatbility, #9: Thorsten Kukuk (kukuk) (2012-09-20 13:17:39) (reply to #8) Coolo told me today that a macro is still calling SUSEconfig and not chkstat. + #10: Marcus Meissner (msmeissn) (2012-09-25 17:57:31) (reply to #9) + which macro and where? + FWIW, I just submitted a permissions package without SuSEconfig. + permissions. Release Notes: SuSEconfig.permissions replaced by chkstat Challenge: (very rough draft) SuSEconfig --module permissions is obsolete / was removed [when this feature is implemented]. Solution: If you want to set the file permissions as defined in /etc/permissions. *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Karl Eichwalder (keichwa) Feature #313538, revision 17 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Done Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) Status: everything is basically done already, the file is just left as a NOP to provide compatbility, #9: Thorsten Kukuk (kukuk) (2012-09-20 13:17:39) (reply to #8) Coolo told me today that a macro is still calling SUSEconfig and not chkstat. #10: Marcus Meissner (msmeissn) (2012-09-25 17:57:31) (reply to #9) which macro and where? FWIW, I just submitted a permissions package without SuSEconfig. permissions. - Release Notes: SuSEconfig.permissions replaced by chkstat + Release Notes: SuSEconfig.permissions Replaced by chkstat Challenge: - (very rough draft) - SuSEconfig --module permissions is obsolete / was removed [when this - feature is implemented]. + It is no longer possible to set file permissions with SuSEconfig -- + module permissions . Solution: If you want to set the file permissions as defined in /etc/permissions. *, run chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
Feature changed by: Karl Eichwalder (keichwa) Feature #313538, revision 18 Title: Get rid of SuSEconfig.permissions openSUSE Distribution: Done Priority Requester: Mandatory Projectmanager: Mandatory Requested by: Andreas Jaeger (a_jaeger) Partner organization: openSUSE.org Description: There is no point to run that code after installation of every package (and it's not run when you use zypper or 3rd party tools anyways). That code should be only run as a part of post-install. Relations: - Remove SuSEconfig (feature/id: 100011) Discussion: #1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39) SuSEconfig.permissions already is a noop when called by SuSEconfig. It's needed for compatibility with existing rpm macros though. #2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1) Is it possible to change the existing rpm macros? #3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2) Btw. the only usage in spec files in Factory is: samba/samba.spec: PreReq: /sbin/conf.d/SuSEconfig.permissions #5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3) I'm quite sure more packages need it, but don't mention it in their dependencies ;-) On my system, at least postfix and yast2-mail drop some files into /etc/permissions.d/ #4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2) https://bugzilla.novell.com/show_bug.cgi?id=764093 #6: Christian Boltz (cboltz) (2012-06-18 22:48:22) It is also needed for being called manually ;-) A common usecase, at least for me, is: - add permissions for a file or directory to /etc/permissions.local (typically for files or directories that come within a RPM) - run SuSEconfig --module permissions to set those permissions Another usecase (once per system) is - set PERMISSION_SECURITY="secure local" in /etc/sysconfig/security - SuSEconfig --module permissions This should still be somehow possible after the proposed change. I don't care too much if the command is named SuSEconfig or make-me-happy. sh ;-) (as long as the change is documented in the Release Notes), but it should be possible to apply the permissions from /etc/permissions.* with a single command. #7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6) chkstat --system #8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15) Status: everything is basically done already, the file is just left as a NOP to provide compatbility, #9: Thorsten Kukuk (kukuk) (2012-09-20 13:17:39) (reply to #8) Coolo told me today that a macro is still calling SUSEconfig and not chkstat. #10: Marcus Meissner (msmeissn) (2012-09-25 17:57:31) (reply to #9) which macro and where? FWIW, I just submitted a permissions package without SuSEconfig. permissions. Release Notes: SuSEconfig.permissions Replaced by chkstat Challenge: It is no longer possible to set file permissions with SuSEconfig -- module permissions . Solution: If you want to set the file permissions as defined in /etc/permissions. - *, run chkstat --system + *, run + chkstat --system -- openSUSE Feature: https://features.opensuse.org/313538
participants (1)
-
fate_noreply@suse.de