On Thu, Aug 16, 2012 at 08:58:22AM +1000, Peter Howard wrote:
> On Wed, 2012-08-15 at 15:49 -0700, Vagrant Cascadian wrote:
> > On Thu, Aug 09, 2012 at 05:26:32PM -0700, Vagrant Cascadian wrote:

> > Would there be any serious problems with just leaving the create privledges 
> > in
> > place?
> 
> Probably not.  I put the revoke line in on the principle of "least
> privilege".  Given alter is still there I doubt it makes that much of a
> security hole.

That's what I figured.


> If noone else complains, I'm not fussed by it being left there.

Ok, seems feasible. That actually addresses the reported bug...

 
> > Though it still fails to upgrade properly in a variety of cases... if the 
> > database upgrade succeeds, but zoneminder fails to start for some reason, 
> > the 
> > upgrade fails... and after running "apt-get -f install" zoneminder tries to 
> > upgrade the 
> > database again, which fails, because it's already upgraded. I'm thinking it 
> > should actually ask the database 
> > itself what version to upgrade from, rather than relying on the version 
> > passed 
> > into postinst. It's not immediately clear what all the ZM_DYN_*_VERSION 
> > values
> > in sql are used for.

This needs more work, still...


> > Also, I've noticed that it seems to require upgrading the kernel and 
> > rebooting
> > before upgrading zoneminder, otherwise it fails to start (and therefore, 
> > fails
> > to upgrade). This may have to do with the switch to using libsys-mmap-perl.

This appears to have been a red herring- the problem is actually that 
zoneminder sometimes doesn't successfully stop before zoneminder attempts to 
start itself (from code added by dh_installinit). Manually stopping zoneminder
appears to work around the issue.

Zoneminder does tend to be slow to stop, in my experience, so perhaps an 
additional check if it's still running is needed... or improve the init script 
itself...

I'll file separate bugs for the remaining two issues.


live well,
  vagrant


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to