(r_usr,r_grp) = (with_user,with_group) ?

2005-08-17 Thread Matthias Kurz
Hi. Shouldn't all packages that use r_usr and/or r_grp get an option to specify a real user/group ? Else, when someone gains access to one package that uses r_usr/r_grp, he would also have access to files from other packages. Also, this may support people who are used to use special (common)

Re: (r_usr,r_grp) = (with_user,with_group) ?

2005-08-17 Thread Ralf S. Engelschall
On Wed, Aug 17, 2005, Matthias Kurz wrote: Shouldn't all packages that use r_usr and/or r_grp get an option to specify a real user/group ? Else, when someone gains access to one package that uses r_usr/r_grp, he would also have access to files from other packages. Also, this may support

Re: (r_usr,r_grp) = (with_user,with_group) ?

2005-08-17 Thread Bill Campbell
On Wed, Aug 17, 2005, Ralf S. Engelschall wrote: On Wed, Aug 17, 2005, Matthias Kurz wrote: Shouldn't all packages that use r_usr and/or r_grp get an option to specify a real user/group ? Else, when someone gains access to one package that uses r_usr/r_grp, he would also have access to files

Re: (r_usr,r_grp) = (with_user,with_group) ?

2005-08-17 Thread Ralf S. Engelschall
On Wed, Aug 17, 2005, Bill Campbell wrote: [...] If there's a pressing reason for someone to use non-standard ownership, they're free to modify the spec file and rebuild for their local use. [...] Oh, yes, indeed. Thanks for the hint, Bill. I've totally overlooked that this is also possible

Re: (r_usr,r_grp) = (with_user,with_group) ?

2005-08-17 Thread Bill Campbell
On Wed, Aug 17, 2005, Ralf S. Engelschall wrote: On Wed, Aug 17, 2005, Bill Campbell wrote: [...] If there's a pressing reason for someone to use non-standard ownership, they're free to modify the spec file and rebuild for their local use. [...] Oh, yes, indeed. Thanks for the hint, Bill.