Bug 136091 – app-admin/prelude-lml - /usr/share/prelude/ruleset/lml needs config protect

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Eric Brown 2006-06-08 10:46:14 UTC]

I found that my changes to files in /etc/prelude-lml/ruleset/ get wiped out when I emerge new versions of prelude-lml.

/etc is in CONFIG_PROTECT, but is it prevented from protecting directories this deep?

Anyway, if I had not backed up my work, I would have lost it all.  For this reason I am marking this bug with a higher severity.

Here is emerge info:

Portage 2.0.54-r2 (hardened/x86/2.6, gcc-3.4.6, glibc-2.3.6-r3, 2.6.14-hardened-r5 i686)
=================================================================
System uname: 2.6.14-hardened-r5 i686 Intel(R) Xeon(TM) CPU 3.00GHz
Gentoo Base System version 1.6.14
dev-lang/python:     2.3.5-r2, 2.4.2
dev-python/pycrypto: [Not Present]
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r2
sys-devel/gcc-config: 1.3.13-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig buildpkg distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://mirror.datapipe.net/gentoo"
MAKEOPTS="-j8"
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 berkdb bzip2 crypt curl doc fam fastcgi gif hardened imap jpeg ldap libclamav maildir mmx nfsv4 nptl nptlonly pam pcre perl pic png postgres prelude python readline samba sasl sse ssl tcpd tiff unicode vhosts zlib userland_GNU kernel_linux elibc_glibc"
Unset:  CTARGET, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTAGE_RSYNC_OPTS

[Comment 1 Jakub Moc (RETIRED) 2006-06-08 13:29:56 UTC]

(In reply to comment #0)
> I found that my changes to files in /etc/prelude-lml/ruleset/ get wiped out
> when I emerge new versions of prelude-lml.
> 
> /etc is in CONFIG_PROTECT, but is it prevented from protecting directories this
> deep?

There are only symlinks in /etc/prelude-lml/ruleset/ pointing to /usr/share/prelude/ruleset/lml...

[Comment 2 Eric Brown 2006-06-08 14:43:32 UTC]

That would do it.

I think there are probably more than a few prelude-lml users who edit those regex files (in fact, you're instructed to edit pcre.conf and single.conf in the prelude handbook).

Would you agree that the ebuild should copy these config files to /etc (non-symlinked)?

(I just submitted a bump of prelude-lml in another bug, it hasn't been reviewed yet and I could easily modify it to accommodate these changes)

[Comment 3 Timothy Stotts 2006-08-19 16:58:39 UTC]

(In reply to comment #2)
I use prelude on my server and concur. These really should be config protected.

[Comment 4 Markus Ullmann (RETIRED) 2006-10-08 17:20:53 UTC]

Will take care of that tomorrow before bumping it

[Comment 5 Cédric Krier 2007-01-07 14:12:18 UTC]

Fix in version 0.9.8.1 in cvs