[Bug 176253] Review Request: clement-2.1

bugzilla at redhat.com bugzilla at redhat.com
Sun Aug 13 21:19:49 UTC 2006


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: clement-2.1


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=176253





------- Additional Comments From j.w.r.degoede at hhs.nl  2006-08-13 17:10 EST -------
(In reply to comment #14)
> We need to be consistent here:
> rpmlint is complaining about putting an application in setuid how could
> you suggest to do this?
> Clement is started un root priviledges and lets them go as soon
> proper port (SMTP) are open, to do this it seteuid with the application program
> ownership. So there is NO purpose to put clement setuid, not from the
> security stand point, not from the rpmlint stand point, not from application 
> stand point.
> 

I think you understood me wrong here, I didn't want to suggest to make
%attr(-,mail,mail) %{_usr}/bin/%{name} setuid, I thought it was setuid and that
was why it has owner and group mail, if its not setuid, then why not just owner
and group root?

> file in %{_usr}/lib are shell for clement application (utilities, support),
> shell are not archs dependent.
> 

OK.

You still haven't explained why you do:
%attr(-,mail,mail) %{_datadir}/%{name}-%{version}/
Instead of just:
%{_datadir}/%{name}-%{version}/
Or is that just a copy and paste error and will you fix that with the next version?


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.




More information about the package-review mailing list