[Bug 578024] Review Request: ingres - Relational DBMS Server and Utilities

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=578024

--- Comment #4 from Jay Hankinson <jeremy.hankinson@xxxxxxxxxx> 2010-04-07 12:58:09 EDT ---
Hi Matthias,

Thanks for starting the review, your help is very much appreciated.

In response to your rpmlint comments:

ingres-client.i686: E: non-standard-dir-perm /var/lib/ingres/files/name 0700
This is the directory used by the Ingres name server which manages the port IDs
of all the other server. For security reason, this dir must only be browseable
by the ingres user

ingres-client.i686: E: setuid-binary /usr/libexec/ingres/bin/ingvalidpam root
04511
This module does the authentication for incoming remove connections and needs
to read /etc/passwd, hence it's set uid root. (Which I believe is allowed here:
http://fedoraproject.org/wiki/Privilege_escalation_policy)

Log rotate I need to do some research on apparently

I don't start ingres-server from the ingres-client package but I do stop it.
Although it sounds counter intuitive, the ingres-client components also contain
servers. The client and server components use the same mechanisms to start and
stop and cannot really be controlled independently if both are installed.
Generally speak Ingres is stopped and started as a product independent of which
components are actually installed. If you need more details about this I'm
happy to expand further.

Will update the ldconfing and pam config files as suggested.

I should note here that I've also realized I've not included most of the
directories in the packaging. I have an update to resolve this and will include
it with the ones mentioned above.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review

[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]