From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) by mx1.pokylinux.org (Postfix) with ESMTP id DE2344C80228 for ; Sun, 22 May 2011 16:54:30 -0500 (CDT) Received: from orsmga001.jf.intel.com ([10.7.209.18]) by orsmga102.jf.intel.com with ESMTP; 22 May 2011 14:54:30 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="4.65,253,1304319600"; d="scan'208";a="2700011" Received: from unknown (HELO [10.255.12.133]) ([10.255.12.133]) by orsmga001.jf.intel.com with ESMTP; 22 May 2011 14:54:29 -0700 Message-ID: <4DD98615.8080507@intel.com> Date: Sun, 22 May 2011 14:54:29 -0700 From: Saul Wold User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.17) Gecko/20110428 Fedora/3.1.10-1.fc13 Thunderbird/3.1.10 MIME-Version: 1.0 To: Xiaofeng Yan References: <20110521184855.1248D1499BF2@gemini.denx.de> <4DD87348.2070700@windriver.com> In-Reply-To: <4DD87348.2070700@windriver.com> Cc: poky@yoctoproject.org Subject: Re: [PATCH 1/1] sudo: Modify ownership for directory "/var/lib" X-BeenThere: poky@yoctoproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Poky build system developer discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 May 2011 21:54:31 -0000 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 05/21/2011 07:22 PM, Xiaofeng Yan wrote: > On 2011年05月22日 02:48, Wolfgang Denk wrote: >> Dear Xiaofeng Yan, >> >> In message you wrote: >>> From: Xiaofeng Yan >>> >>> [YOCTO #1092] >>> Solve access permission for directory "/var/lib". >>> Makefile from package sudo change the ownership incorrectly. >>> Xiaofeng, I would suggest you take a look at what nfs-utils is doing at rootfs build time. That might be the package that's causing problems. Sau! >>> Signed-off-by: Xiaofeng Yan >>> --- >>> meta/recipes-extended/sudo/sudo.inc | 1 + >>> 1 files changed, 1 insertions(+), 0 deletions(-) >>> >>> diff --git a/meta/recipes-extended/sudo/sudo.inc b/meta/recipes-extended/sudo/sudo.inc >>> index 6a04a9c..5ea089c 100644 >>> --- a/meta/recipes-extended/sudo/sudo.inc >>> +++ b/meta/recipes-extended/sudo/sudo.inc >>> @@ -30,4 +30,5 @@ pkg_postinst_${PN} () { >>> >>> chmod 4111 /usr/bin/sudo >>> chmod 0440 /etc/sudoers >>> + chmod 0755 /var/lib >> Sorry, but this commit message is misleading. You don't change the >> ownership here, but the file permissions. >> > Hi Wolfgang Denk, > Thanks for your reply. I am make lsb test to pass LSB certification. LSB > Test suite check /vat/lib, but failed with the following information. > /tset/LSB.fhs/var/lib/lib-tc 1 failed > > > Message from the test: > > Reference 5.8-1(A) > The /var/lib directory exists and is searchable > Unexpected output written to stdout, as shown below: > stdout:lsb_test_dir: expected be able to search directory /var/lib, got an error > stdout:ls: cannot open directory /var/lib: Permission denied > > > > emenlow$ls /var/lib -l > drwx------ 10 root root 4096 May 20 19:21 lib > > For general machine, the ownership of this directory is as follow: > ubuntu$ls /var/lib -l > drwxr-xr-x 67 root root 4096 2010-12-15 23:30 lib > > In fact, many packages make a operation to directory "/var/lib". I find > the Makefile from package "sudo" change the ownership. Please review the > following patch. > > --- Makefile.orj 2011-05-21 16:32:35.392833427 +0800 > +++ Makefile 2011-05-21 16:36:47.979380106 +0800 > @@ -482,7 +482,7 @@ > $(DESTDIR)$(visudodir) $(DESTDIR)$(noexecdir) \ > $(DESTDIR)$(sudoersdir) $(DESTDIR)$(docdir) \ > $(DESTDIR)$(mandirsu) $(DESTDIR)$(mandirform) > - $(SHELL) $(srcdir)/mkinstalldirs -m 0700 $(DESTDIR)$(timedir) > + $(SHELL) $(srcdir)/mkinstalldirs -m 0755 $(DESTDIR)$(timedir) > > install-binaries: install-dirs $(PROGS) > $(INSTALL) -b~ -O $(install_uid) -G $(install_gid) -M 04111 sudo > $(DESTDIR)$(sudodir)/sudo > > So "0700" make this directory without access permission. Perhaps it > could not be right method, I think you have a better method to solve > this problem. If you have, Please share with me. > Thanks for your suggestion again. > > Thanks > Yan >> Best regards, >> >> Wolfgang Denk >> > > > > _______________________________________________ > poky mailing list > poky@yoctoproject.org > https://lists.yoctoproject.org/listinfo/poky