[devel] I: nobody-owned files in packages

[Arseny Maslennikov <arseny@altlinux.org>]

[-- Attachment #1: Type: text/plain, Size: 1391 bytes --]

On Mon, Jan 08, 2024 at 12:52:45PM +0300, Arseny Maslennikov wrote:
> https://packages.altlinux.org/tasks/330460

В ближайшее время задание уйдёт в сизиф.

> #740 setup 2.2.19-alt1 -> 2.2.20-alt1
>  Tue Nov 07 2023 Arseny Maslennikov <arseny@altlinux> 2.2.20-alt1
>  - Install the default overflowuid defined by Linux (incl. our kernels) as the
>    nobody user and group. The user and group 99 are installed as _nobody99.
> #1000 filesystem 2.3.18-alt1 -> 2.3.19-alt1
>  Thu Nov 16 2023 Arseny Maslennikov <arseny@altlinux> 2.3.19-alt1
>  - Removed /var/nobody altogether.
> #1140 basesystem 1:sisyphus-alt23 -> 1:sisyphus-alt25
>  Sun Dec 10 2023 Arseny Maslennikov <arseny@altlinux> 1:sisyphus-alt25
>  - Split interactivesystem away from basesystem.
>  Sat Dec 09 2023 Arseny Maslennikov <arseny@altlinux> 1:sisyphus-alt24
>  - Added a facility to upgrade default passwd entries, hopefully temporary.

Обращаю особое внимание на следующее правило:

> #1600 sisyphus_check 0.8.68-alt2 -> 0.8.69-alt1
>  Tue Nov 14 2023 Arseny Maslennikov <arseny@altlinux> 0.8.69-alt1
>  - Disallowed file objects whose owner or group is nobody.

sisyphus-check будет зарубать пакеты, где что-либо упаковано как:
  %attr(*, nobody, *)
или
  %attr(*, *, nobody)

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]