172680 2007-03-29 15:34 0000 net-misc/asterisk-1.2.14-r2: Permissions rework 2007-04-26 19:07:09 0000 1 1 1 Unclassified Gentoo Linux Applications 2006.1 All Linux RESOLVED FIXED P2 normal --- 1 chainsaw@gentoo.org voip@gentoo.org sgtphou@fire-eyes.org chainsaw@gentoo.org 2007-03-29 15:34:53 0000 The current ebuild tramples all over the permissions in /etc/asterisk because it uses a recursive chmod/chown. It only installs 3 files here: tony@pink /usr/portage/packages/All $ ls /tmp/new-asterisk/etc/asterisk/ asterisk.adsi extensions.ael telcordia-1.adsi As such, it has no business fiddling with permissions in /etc/asterisk/LINX and /etc/asterisk/TEST. The attached patch deals with this, and also enables group write on two directories. This allows a non-root user in the asterisk group to start, stop and configure the asterisk daemon. Care has been taken to not enable group write where it does not make sense (such as on the log directory). chainsaw@gentoo.org 2007-03-29 15:35:20 0000 Created an attachment (id=114866) asterisk-perms.diff sgtphou@fire-eyes.org 2007-04-10 16:54:44 0000 Could this issue also cause the mass removal of most files in /etc/asterisk? after my first upgrade of asterisk, i had 4 config files and examples left, compared to about 44 before the update. I wasn't able to reproduce the error, but the possibility of that happening is quite nasty to users. Luckly I had a backup. Sadly most won't. chainsaw@gentoo.org 2007-04-11 15:23:18 0000 Gustavoz needs to review this before it can be committed, but currently lacks time. chainsaw@gentoo.org 2007-04-25 13:28:18 0000 Created an attachment (id=117227) asterisk-perms.diff Added group write permissions on spool directory for a non-root voicemail interface. gustavoz@gentoo.org 2007-04-26 19:05:29 0000 asterisk-1.2.17 in cvs in ~arch, it'll take a couple of hours for the files to get to the mirrors though. it should go stable soonish. 114866 2007-03-29 15:35 0000 asterisk-perms.diff asterisk-perms.diff text/plain LS0tIGFzdGVyaXNrLTEuMi4xNC1yMi5lYnVpbGQub3JpZwkyMDA3LTAzLTI5IDEzOjQ4OjAxLjAw MDAwMDAwMCArMDEwMAorKysgYXN0ZXJpc2stMS4yLjE0LXIyLmVidWlsZAkyMDA3LTAzLTI5IDE0 OjAzOjEwLjAwMDAwMDAwMCArMDEwMApAQCAtMzk3LDEzICszOTcsMjIgQEAKIAogcGtnX3Bvc3Rp bnN0KCkgewogCWVpbmZvICJGaXhpbmcgcGVybWlzc2lvbnMiCi0JZm9yIHggaW4gc3Bvb2wgcnVu IGxpYiBsb2c7IGRvCisJZm9yIHggaW4gc3Bvb2wgbG9nOyBkbwogCQljaG93biAtUiBhc3Rlcmlz azphc3RlcmlzayAiJHtST09UfSJ2YXIvJHt4fS9hc3RlcmlzawogCQljaG1vZCAtUiB1PXJ3WCxn PXJYLG89ICAgICAiJHtST09UfSJ2YXIvJHt4fS9hc3RlcmlzawogCWRvbmUKIAotCWNob3duIC1S IHJvb3Q6YXN0ZXJpc2sgIiR7Uk9PVH0iZXRjL2FzdGVyaXNrCi0JY2htb2QgLVIgdT1yd1gsZz1y WCxvPSAiJHtST09UfSJldGMvYXN0ZXJpc2sKKwlmb3IgeCBpbiBydW4gbGliOyBkbworCQljaG93 biAtUiBhc3Rlcmlzazphc3RlcmlzayAiJHtST09UfSJ2YXIvJHt4fS9hc3RlcmlzaworCQljaG1v ZCAtUiB1PXJ3WCxnPXJ3WCxvPSAgICAiJHtST09UfSJ2YXIvJHt4fS9hc3RlcmlzaworCWRvbmUK KworCWNob3duIGFzdGVyaXNrOmFzdGVyaXNrICIke1JPT1R9ImV0Yy9hc3Rlcmlzay8KKwljaG93 biBhc3Rlcmlzazphc3RlcmlzayAiJHtST09UfSJldGMvYXN0ZXJpc2svKi5hZHNpCisJY2hvd24g YXN0ZXJpc2s6YXN0ZXJpc2sgIiR7Uk9PVH0iZXRjL2FzdGVyaXNrL2V4dGVuc2lvbnMuYWVsCisJ Y2htb2QgdT1yd1gsZz1yd1gsbz0gIiR7Uk9PVH0iZXRjL2FzdGVyaXNrLworCWNobW9kIHU9cndY LGc9cndYLG89ICIke1JPT1R9ImV0Yy9hc3Rlcmlzay8qLmFkc2kKKwljaG1vZCB1PXJ3WCxnPXJ3 WCxvPSAiJHtST09UfSJldGMvYXN0ZXJpc2svZXh0ZW5zaW9ucy5hZWwKIAllY2hvCiAKIAkjCg== 117227 2007-04-25 13:28 0000 asterisk-perms.diff blah.patch text/plain LS0tIGFzdGVyaXNrLTEuMi4xNC1yMi5lYnVpbGQub3JpZwkyMDA3LTA0LTI1IDE0OjI0OjA3LjAw MDAwMDAwMCArMDEwMAorKysgYXN0ZXJpc2stMS4yLjE0LXIyLmVidWlsZAkyMDA3LTA0LTI1IDE0 OjI1OjExLjAwMDAwMDAwMCArMDEwMApAQCAtMzk3LDEzICszOTcsMjAgQEAKIAogcGtnX3Bvc3Rp bnN0KCkgewogCWVpbmZvICJGaXhpbmcgcGVybWlzc2lvbnMiCi0JZm9yIHggaW4gc3Bvb2wgcnVu IGxpYiBsb2c7IGRvCisJY2hvd24gLVIgYXN0ZXJpc2s6YXN0ZXJpc2sgIiR7Uk9PVH0idmFyL2xv Zy9hc3RlcmlzaworCWNobW9kIC1SIHU9cndYLGc9clgsbz0gICAgICIke1JPT1R9InZhci9sb2cv YXN0ZXJpc2sKKworCWZvciB4IGluIGxpYiBydW4gc3Bvb2w7IGRvCiAJCWNob3duIC1SIGFzdGVy aXNrOmFzdGVyaXNrICIke1JPT1R9InZhci8ke3h9L2FzdGVyaXNrCi0JCWNobW9kIC1SIHU9cndY LGc9clgsbz0gICAgICIke1JPT1R9InZhci8ke3h9L2FzdGVyaXNrCisJCWNobW9kIC1SIHU9cndY LGc9cndYLG89ICAgICIke1JPT1R9InZhci8ke3h9L2FzdGVyaXNrCiAJZG9uZQogCi0JY2hvd24g LVIgcm9vdDphc3RlcmlzayAiJHtST09UfSJldGMvYXN0ZXJpc2sKLQljaG1vZCAtUiB1PXJ3WCxn PXJYLG89ICIke1JPT1R9ImV0Yy9hc3RlcmlzaworCWNob3duIGFzdGVyaXNrOmFzdGVyaXNrICIk e1JPT1R9ImV0Yy9hc3Rlcmlzay8KKwljaG93biBhc3Rlcmlzazphc3RlcmlzayAiJHtST09UfSJl dGMvYXN0ZXJpc2svKi5hZHNpCisJY2hvd24gYXN0ZXJpc2s6YXN0ZXJpc2sgIiR7Uk9PVH0iZXRj L2FzdGVyaXNrL2V4dGVuc2lvbnMuYWVsCisJY2htb2QgdT1yd1gsZz1yd1gsbz0gIiR7Uk9PVH0i ZXRjL2FzdGVyaXNrLworCWNobW9kIHU9cndYLGc9cndYLG89ICIke1JPT1R9ImV0Yy9hc3Rlcmlz ay8qLmFkc2kKKwljaG1vZCB1PXJ3WCxnPXJ3WCxvPSAiJHtST09UfSJldGMvYXN0ZXJpc2svZXh0 ZW5zaW9ucy5hZWwKIAllY2hvCiAKIAkjCg==