On 10/06/2015 12:50 PM, cagsm wrote:

Seriously. Please explain. I would like to understand the minds and the workings of unix and linux.

It seems perfectly reasonable to me, but it doesn't to you because you've looked at this in isolation. Here is one hypothesis. It is a hypothesis because it is reasonable but it is only a hypothesis because you have not supplied enough contextual information about what you did to being this about or how your system is configured. Linux has a number of security levels and configurations. You can personalise these in detail of you want, but they are there are there as part of the package. You can see, for example /etc/polkit-default-privs.local /etc/polkit-default-privs.restrictive /etc/polkit-default-privs.standard and more under /etc/security/ In particular, there are a set of files which determine the permission settings for a whole bunch of files. /etc/permissions /etc/permissions.easy /etc/permissions.secure /etc/permissions.paranoid /etc/permissions.local In addition there should be a directory /etc/permissions.d with permissions settings for each of a number of specific applications. These files determine the settings according to the level of 'paranoia' or lack of it you decide to have for YOUR system. This will *always* override the settings of any package that is installed. All this is well documented. Please RTFM: "settings" in section 5 of the manual. How would you find this? The 'apropos' command is very, very good at giving pointers on just about all mattes. You may need a few attempts with different keywords but this one should be easy. Here, the page says <quote> The chkstat program sets permissions and ownerships according to the permission files. </quote> So next up look at the man page for "chkstat" The key here is <quote> In system mode /etc/permissions/security determines which level to use and whether to actually apply permission changes. </quote> Actually this is now /etc/sysconfig/security. Under current Linux check sysconfig first :-0 So its possible that the installation triggered a check of *your specific* configuration and adjusted the permissions accordingly. The packager does not know how any particular user is going to configure his or her system. It is also possible that cron or similar runs "chkstat --system" regularly. That's another hypothesis, but since this seems to have occurred when you installed the package, I'd go for the first hypothesis. Linux is nowhere near as draconian as Windows. Linux assumes its users are smart and are going to invest some time making Linux do what they want, and by that I don't mean the kind of "eye candy" that a GUI permits. The issue with those levels of configuration and policy is "how paranoid do you want to be?" Linux is not in its infancy, it is quite mature and very sophisticated. I realise that this sophistication may often bee baffling and confusing to someone from Windowsland or even OSX-land where the attitudes are much more paternalistic. Under the hood, Linux is not really a desktop system :-/ The X display server can run anywhere, it doesn't need the OS; this is quite the opposite to the way of Windows where the display is a key part of the OS. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

cagsm schreef:

How is this linux or related unix world actually considered to be stable or paradigms and somet truth cast in stone, if seemingly every day essentials and utmost basic stuff changes.

Nobody really thought really well about it. If you do a scan, you will find for instances that the "root" user owns like 99% of all files that are not user-owned (that are not part of a user's home directory). So you get a security model in which root is almost like the only ubiqitous presence. That means you need root to do basically anything that is not confined to a single user, which means you have to use it all the time, which means its value as a security mechanism diminishes greatly (just as it is on Windows by the way, but still, more so). For fun, try this script: cat /etc/passwd | cut -d: -f1 | while read f; do printf "%-15s %6d\n" $f `find / -type f -user $f -xdev | wc -l`; done And you'll see how much the "other" users are used. Also, it means or seems to be meaning, or at least the result of the system is that although there are "groups" they are hardly every used by default. As such, for most files the group-write permissions are always turned off and I think you will find easily that for 99% of files in the base system the group read flag is either the same as the owner read flag, or removed (rarely). Most files are either 755/644 or 700/600 (if security is warranted) so you will see that in effect, the whole group feature is not even USED in the base Linux system. The problem of course is that if you want to do anything in such a system that requires editing files, and those files belong to prepackaged programs, you now have to be root to edit it, even if it is just a user stylesheet for a wiki program. So the base security model is really quite rotten, there is no differentiation or sense of layers or layerism that might make it possible to use intermediate or "less powerful" users to do more common tasks, the whole directory structure that was really designated for such things (/usr/local) is never even commonly used (except when you want to compile something yourself) and so the whole "local" thing to a linux system is pretty much nonexistent unless you put it in yourself, which of course requires a lot of development and time and means you are basically constructing a new security model yourself. So basically, yes, it is very primitive and for it to become something really useful or even slightly "adequate" from a common user point of view, it needs a lot of development time still ;-). Heh, Anton ? :P ;P. It is definitely not adequate for me, but I have much higher goals, or at least I used to have them. So I will say the little fiddling between 4755 and 4750 (I don't even know what the 4 means) is really quite meaningless, it meant that previously it was not "world" readable and now it is. That's also just personal choice, if there is nothing to hide in that crontab file (which probably there isn't, but it depends (it depends it depends, of course it depends). ) you might perhaps just as well show it to everyone and his sick jealous monkey squad. :D. Regards... -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org