[Bug 1203018] Review Request: baculum - WebGUI tool for Bacula Community program

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1203018



--- Comment #26 from Dominik 'Rathann' Mierzejewski <dominik at greysector.net> ---
(In reply to Marcin Haba from comment #23)
> For now I would solve this error:
> baculum-httpd.noarch: E: non-readable
> /usr/share/baculum/htdocs/protected/Data/baculum.users 0600L
> 
> In this "baculum.users" file are stored HTTP Basic auth credentials. From
> this reason privilages are 0600. I think that I cannot move the file to /etc
> because the file is modifying via Baculum web interface and it might be
> strange that web application make modification in /etc file. And of course
> it is danterous.

If this file is modified over time, you should put it somewhere in /var
(/var/lib/baculum perhaps) and mark it with %verify macro accordingly so that
rpm -V doesn't complain when it's modified. /usr/share is for static content.
/etc/baculum could also be used. See
https://fedoraproject.org/wiki/Packaging:Guidelines#Filesystem_Layout .

[...]
> $ rpmlint ./baculum-httpd-7.0.6-0.5.b.fc22.noarch.rpm 
[...]
> baculum-httpd.noarch: E: non-readable
> /usr/share/baculum/htdocs/protected/Data/baculum.users 0600L
> 
> $ rpmlint ./baculum-lighttpd-7.0.6-0.5.b.fc22.noarch.rpm 
[...]
> baculum-lighttpd.noarch: E: non-readable
> /usr/share/baculum/htdocs/protected/Data/baculum.users 0600L

Please note that you should not duplicate files between two subpackages:
https://fedoraproject.org/wiki/Packaging:Guidelines#Duplicate_Files

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component