Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 102985 - GNAP: gnap-agetty permissions
Summary: GNAP: gnap-agetty permissions
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Hosted Projects
Classification: Unclassified
Component: GNAP (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Network Appliance Bugs
URL:
Whiteboard:
Keywords: InVCS
Depends on:
Blocks: 103320
  Show dependency tree
 
Reported: 2005-08-18 10:00 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2005-08-31 05:05 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-18 10:00:20 UTC
gnap-agetty is installed without execute permission.
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-08-22 01:14:54 UTC
Yes, the ebuild doesn't set the +x bits in the root_overlay directory. So any
complete GNAP build will miss the +x bits on gnap-agetty and rw-sync.sh...

Workaround: 
chmod a+x /usr/lib/gnap/specs/root_overlay/usr/bin/*
after installation and before rebuild.
Comment 2 Thierry Carrez (RETIRED) gentoo-dev 2005-08-28 02:21:43 UTC
Two solutions possible to this problem :

1- Fix the gnap-dev ebuild so that it installs the /usr/lib/gnap/specs directory
contents with the right permissions (replacing the "doins -r specs" by a "cp -Rp
specs /usr/lib/gnap/")

2- Ship the specs directory as a .tar.bz2 tarball in /usr/lib/gnap and improve
gnap_make so that it can use .tar.bz2'd specs directories as inputs (with the
one in /usr/lib/gnap the default value).

Solution 1 is the less destructive one. Just fixes the problem.

Solution 2 needs a change in documentation (you don't copy specs before
modifying them, you unpack them) and is less readable (you can't "have a look"
at the specs file without unpacking), but offers extra functionality: the
possibility to use tar.bz2'd specs directories and the possibility to have
SUID-bit executables in root_overlay without compromising the build host. I
never felt comfortable shipping executable files in /usr/lib/gnap anyway...
Comment 3 José Alberto Suárez López (RETIRED) gentoo-dev 2005-08-28 12:27:28 UTC
i prefer the second option.

more secure and in the future we can implement nice features with this :)

PS:sorry im really busy these days, we are moving the office
Comment 4 Thierry Carrez (RETIRED) gentoo-dev 2005-08-29 05:26:27 UTC
Fix in CVS. Docs will need an update to talk about specs .tar.bz2 files (and to
remove the need for a full path with -e option).
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2005-08-31 05:05:55 UTC
Fixed in 1.8.1 release and ebuilds.