Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Package should not set root:root owner recursively #16

Closed
davidcoutadeur opened this issue Apr 9, 2018 · 1 comment
Closed

Package should not set root:root owner recursively #16

davidcoutadeur opened this issue Apr 9, 2018 · 1 comment
Assignees
@davidcoutadeur
Labels
enhancement
Milestone
2.4.47

Comments

@davidcoutadeur
Copy link
Contributor

When applying this command:

/bin/chown -R root:root ${LDAPSERVERDIR}

the owner modifications are applied recursively.
However, if the directory slapd.d exists in etc/openldap/ and has correct owner root:ldap, it overwrites the owner permissions.
We could instead select more precisely the files with:

/bin/chown root:root ${LDAPSERVERDIR}
/bin/chown -R root:root ${LDAPSERVERDIR}/bin
/bin/chown -R root:root ${LDAPSERVERDIR}/etc/openldap/{DB_CONFIG.example,ldap.conf,ldap.conf.default,ppm.conf,schema,slapd.conf,slapd.conf.default,slapd.ldif,slapd.ldif.default}
/bin/chown -R root:root ${LDAPSERVERDIR}/include
/bin/chown -R root:root ${LDAPSERVERDIR}/lib64
/bin/chown -R root:root ${LDAPSERVERDIR}/libexec
/bin/chown -R root:root ${LDAPSERVERDIR}/sbin
/bin/chown -R root:root ${LDAPSERVERDIR}/var
davidcoutadeur added a commit that referenced this issue Apr 16, 2018
@davidcoutadeur
Package should not set root:root owner recursively (references #16)
7574606
davidcoutadeur added a commit that referenced this issue Apr 16, 2018
@davidcoutadeur
fix previous: Package should not set root:root owner recursively (#16)…
539a43c 
… for 32 bit systems
@davidcoutadeur
Copy link
Contributor Author

Done in 7574606 + 539a43c
Some adaptations necessary:

# Globally set owner to root:root
chown root:root ${LDAPSERVERDIR}
chown -R root:root ${LDAPSERVERDIR}/bin
chown -R root:root ${LDAPSERVERDIR}/etc/openldap/{DB_CONFIG.example,ldap.conf,ldap.conf.default,schema,slapd.conf.default,slapd.ldif,slapd.ldif.default}
chown -R root:root ${LDAPSERVERDIR}/include
chown -R root:root ${LDAPSERVERDIR}/lib*
chown -R root:root ${LDAPSERVERDIR}/libexec
chown -R root:root ${LDAPSERVERDIR}/sbin
chown -R root:root ${LDAPSERVERDIR}/var

@coudot coudot added this to the 2.4.47 milestone Dec 22, 2018
davidcoutadeur pushed a commit that referenced this issue Dec 29, 2018
make openldap ltb deb pass lintian checks (#15) + Package should not …
157b6b6 
…set root:root owner recursively (#16) + integrate explockout (#19) + release 2.4.47
@coudot coudot closed this as completed Jan 8, 2019
@sophieqc sophieqc mentioned this issue Nov 10, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@davidcoutadeur davidcoutadeur

Labels
enhancement
Projects
None yet
Milestone
2.4.47
Development

No branches or pull requests
2 participants
@coudot @davidcoutadeur