Bug#777664: [Pkg-salt-team] Bug#777664: Bug#777664: salt-minion: Make log file readable by adm group

2015-02-18 Thread Benjamin Drung
Am Sonntag, den 15.02.2015, 00:03 +1100 schrieb Joe Healy:
 Hi Ben,
 
 On Wed, Feb 11, 2015 at 9:18 PM, Benjamin Drung
 benjamin.dr...@profitbricks.com wrote:
 
  I'll make these changes. You are partially right - I/we do need a
  sponsor, but I haven't asked for one yet as I want to make sure the
  latest addition to the packaging (salt-api) is ok before I do (hence
  the -3...).
 
 Working through the patch, setting the directory mode to 2750 causes
 the lintian issue non-standard-dir-perm. Is this needed? I'm not sure
 I follow the reason for it (the directory permission change).

Yes, this change is needed. A root:adm owned directory with mode 2750
gives root the permission to read and write to that directory and the
group adm to read. Thanks to setgid, files written to the directory by
root:root processes are stored as root:adm.

The samba package does the (nearly) same and overrides the lintian
warning:

# This is on purpose to hide sensitive information
samba-common: non-standard-dir-perm var/log/samba/ 0750 != 0755


-- 
Benjamin Drung
System Developer

ProfitBricks GmbH - The IaaS-Company
Greifswalder Str. 207
D - 10405 Berlin

Mail: benjamin.dr...@profitbricks.com
Fax:  +49 30 577 008 598
URL:  http://www.profitbricks.com

Sitz der Gesellschaft: Berlin.
Registergericht: Amtsgericht Charlottenburg, HRB 125506 B.
Geschäftsführer: Andreas Gauger, Achim Weiss.


signature.asc
Description: This is a digitally signed message part


Bug#777664: [Pkg-salt-team] Bug#777664: Bug#777664: salt-minion: Make log file readable by adm group

2015-02-14 Thread Joe Healy
Hi Ben,

On Wed, Feb 11, 2015 at 9:18 PM, Benjamin Drung 
benjamin.dr...@profitbricks.com wrote:

 I'll make these changes. You are partially right - I/we do need a
 sponsor, but I haven't asked for one yet as I want to make sure the
 latest addition to the packaging (salt-api) is ok before I do (hence
 the -3...).

Working through the patch, setting the directory mode to 2750 causes
the lintian issue non-standard-dir-perm. Is this needed? I'm not sure
I follow the reason for it (the directory permission change).

Thanks,

Joe