Mailinglist Archive: opensuse-features (16 mails)

< Previous Next >
[openFATE 313538] Get rid of SuSEconfig.permissions
Feature changed by: Karl Eichwalder (keichwa)
Feature #313538, revision 18
Title: Get rid of SuSEconfig.permissions

openSUSE Distribution: Done
Priority
Requester: Mandatory
Projectmanager: Mandatory

Requested by: Andreas Jaeger (a_jaeger)
Partner organization: openSUSE.org

Description:
There is no point to run that code after installation of every package
(and it's not run when you use zypper or 3rd party tools anyways). That
code should be only run as a part of post-install.

Relations:
- Remove SuSEconfig (feature/id: 100011)

Discussion:
#1: Ludwig Nussel (lnussel) (2012-06-18 15:46:39)
SuSEconfig.permissions already is a noop when called by SuSEconfig.
It's needed for compatibility with existing rpm macros though.

#2: Andreas Jaeger (a_jaeger) (2012-06-18 16:20:35) (reply to #1)
Is it possible to change the existing rpm macros?

#3: Andreas Jaeger (a_jaeger) (2012-06-18 16:22:20) (reply to #2)
Btw. the only usage in spec files in Factory is: samba/samba.spec:
PreReq: /sbin/conf.d/SuSEconfig.permissions

#5: Christian Boltz (cboltz) (2012-06-18 19:45:11) (reply to #3)
I'm quite sure more packages need it, but don't mention it in their
dependencies ;-)
On my system, at least postfix and yast2-mail drop some files into
/etc/permissions.d/

#4: Ludwig Nussel (lnussel) (2012-06-18 16:36:52) (reply to #2)
https://bugzilla.novell.com/show_bug.cgi?id=764093

#6: Christian Boltz (cboltz) (2012-06-18 22:48:22)
It is also needed for being called manually ;-)
A common usecase, at least for me, is: - add permissions for a file or
directory to /etc/permissions.local (typically for files or directories
that come within a RPM) - run SuSEconfig --module permissions to set
those permissions
Another usecase (once per system) is - set PERMISSION_SECURITY="secure
local" in /etc/sysconfig/security - SuSEconfig --module permissions
This should still be somehow possible after the proposed change. I
don't care too much if the command is named SuSEconfig or make-me-happy.
sh ;-) (as long as the change is documented in the Release Notes), but
it should be possible to apply the permissions from /etc/permissions.*
with a single command.

#7: Ludwig Nussel (lnussel) (2012-06-19 08:59:04) (reply to #6)
chkstat --system

#8: Marcus Meissner (msmeissn) (2012-06-20 08:42:15)
Status: everything is basically done already, the file is just left as
a NOP to provide compatbility,

#9: Thorsten Kukuk (kukuk) (2012-09-20 13:17:39) (reply to #8)
Coolo told me today that a macro is still calling SUSEconfig and not
chkstat.

#10: Marcus Meissner (msmeissn) (2012-09-25 17:57:31) (reply to #9)
which macro and where?
FWIW, I just submitted a permissions package without SuSEconfig.
permissions.



Release Notes: SuSEconfig.permissions Replaced by chkstat

Challenge:
It is no longer possible to set file permissions with SuSEconfig --
module permissions .

Solution:
If you want to set the file permissions as defined in /etc/permissions.
- *, run chkstat --system
+ *, run
+ chkstat --system


--
openSUSE Feature:
https://features.opensuse.org/313538

< Previous Next >
This Thread
  • No further messages