[Bug 784670] VUL-1: fdupes: RPM macro %fdupes links files with different owner, group, or permissions

https://bugzilla.novell.com/show_bug.cgi?id=784670 https://bugzilla.novell.com/show_bug.cgi?id=784670#c32 --- Comment #32 from Michal Vyskocil 2012-11-01 08:40:32 UTC --- (In reply to comment #29)

Yes, but we will fix it for Factory? I do not understand, why Michal says:

Hi Karl, sorry for beeing cryptic

"However you should change the mode of all $HOME/$THING to 0755, because fdupes now sorts according mtab, so the 0644 /usr/bin symlink might happen."

The SUSE patched fdupes sort duplicates according name - that means, the output for docbook package was usr/bin/dbtoepub usr/share/xml/docbook/stylesheet/nwalsh/1.77.1/epub/bin/dbtoepub so the %fdupes macro left the first line untouched and converted all others to a link. But that have changed in Factory, because in fdupes 1.5 upstream have added the sorting according mtime. I did not want to deviate from upstream much, but it's no longer guaranteed that shorter path will win. On the other hand, %fdupes no longer link files with different uid/gid/permissions, so that's not the big issue.

Shall I do this for 12.2? Or for Factory (just for sure?)?

Factory is enough. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.