Bug 172680 - net-misc/asterisk-1.2.14-r2: Permissions rework
Bug#: 172680 Product:  Gentoo Linux Version: 2006.1 Platform: All
OS/Version: Linux Status: RESOLVED Severity: normal Priority: P2
Resolution: FIXED Assigned To: voip@gentoo.org Reported By: chainsaw@gentoo.org
Component: Applications
URL: 
Summary: net-misc/asterisk-1.2.14-r2: Permissions rework
Keywords:  
Status Whiteboard: 
Opened: 2007-03-29 15:34 0000
Description:   Opened: 2007-03-29 15:34 0000
The current ebuild tramples all over the permissions in /etc/asterisk because
it uses a recursive chmod/chown. It only installs 3 files here:
tony@pink /usr/portage/packages/All $ ls /tmp/new-asterisk/etc/asterisk/
asterisk.adsi  extensions.ael  telcordia-1.adsi

As such, it has no business fiddling with permissions in /etc/asterisk/LINX and
/etc/asterisk/TEST. The attached patch deals with this, and also enables group
write on two directories. This allows a non-root user in the asterisk group to
start, stop and configure the asterisk daemon.
Care has been taken to not enable group write where it does not make sense
(such as on the log directory).

------- Comment #1 From Tony Vroon 2007-03-29 15:35:20 0000 -------
Created an attachment (id=114866) [details]
asterisk-perms.diff

------- Comment #2 From FieldySnuts 2007-04-10 16:54:44 0000 -------
Could this issue also cause the mass removal of most files in /etc/asterisk?
after my first upgrade of asterisk, i had 4 config files and examples left,
compared to about 44 before the update. I wasn't able to reproduce the error,
but the possibility of that happening is quite nasty to users. Luckly I had a
backup. Sadly most won't.

------- Comment #3 From Tony Vroon 2007-04-11 15:23:18 0000 -------
Gustavoz needs to review this before it can be committed, but currently lacks
time.

------- Comment #4 From Tony Vroon 2007-04-25 13:28:18 0000 -------
Created an attachment (id=117227) [details]
asterisk-perms.diff

Added group write permissions on spool directory for a non-root voicemail
interface.

------- Comment #5 From Gustavo Zacarias (RETIRED) 2007-04-26 19:05:29 0000 -------
asterisk-1.2.17 in cvs in ~arch, it'll take a couple of hours for the files to
get to the mirrors though.
it should go stable soonish.