[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Packaging question: /usr/share/gnome/help ownership



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

/usr/share/gnome/help is owned by yelp. According to the packaging
guidelines, section 1.35: File and Directory Ownership, use case 2:

"there are several instances where it's desirable for multiple packages
to own a directory. Examples of this are:
...
2) Multiple packages have files in a common directory but none of them
requires others.
...
In all cases we are guarding against unowned directories being present
on a system. Unowned directories are affected by the umask of the user
installing the package and thus can be a security risk or lead to
packages which won't run."

For GNOME packages, the consensus as expressed in existing packages
seems to be to assume that yelp is installed, and so individual packages
neither Requires: yelp (since the basic functionality does not depend on
it) nor own /usr/share/gnome/help. Is this not dangerous, though? For
instance, someone running an alternative desktop, and using yum to
install selected GTK/GNOME packages might end up with a dangling
/usr/share/gnome/help if yelp is never installed.

Should applications that put files under /usr/share/gnome/help be
required to own it (or depend on yelp)? In that case, there's a lot of
clean-up to do w.r.t. GNOME packages.

Thanks,

- --
Michel Salim
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkhMSekACgkQWt0J3fd+7ZBYcgCghcJmnX6cKMOIetlA46GuWmpK
AM8An1cxYMZlLF/TaJi8fC/URrE0R0wF
=oV21
-----END PGP SIGNATURE-----


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]