[Bug 169247] Review request: rt3 - Request tracker 3

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review request: rt3 - Request tracker 3


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169247





------- Additional Comments From rc040203 at freenet.de  2005-10-13 06:24 EST -------
(In reply to comment #9)
> (In reply to comment #8)
> > > > W: rt3 dangerous-command-in-%postun userdel
> > > > 
> > > > I'll leave this one alone.  The package creates the user in %pre, it's only
> > > > right that the user is removed when no longer needed, I suppose.
> > > 
> > > See
> > > https://www.redhat.com/archives/fedora-extras-commits/2005-June/msg00271.html
> > > for why users and groups shouldn't be removed when a package is uninstalled.
> > Then you probably know my attitude on this topic. 
> > 
> > The rt3 user is a local system account (!) and is not meant to be used across
> > networks. Also, the rt3 package has all files being own by the rt3 user under
> > its control.
> 
> The issue is nothing to do with networks; leaving the user there ensures that
> any files left that are owned by the "rt3" user after deletion of the rt3
> package are still owned by the "rt3" user if the package is subsequently
> reinstalled. If the account is deleted on uninstall, the reinstallation may
> result in a new rt3 user being created with a different UID to the original
> one
There is no such issue, because the rt3 package does not leave any file being
owned by rt3 left around.
 
> I'm using httpd with SELinux without problems, albeit only serving static
> pages
> and a few cgi scripts. I know though that more complex packages such as
> squirrelmail can work with SELinux enabled too.
Does SELinux work for anything but trivial cases? IMO, no - It still leave much
to be desired and so far has failed to prove sustainability.

> What does the package do with the files/directories in /var/lib/rt3? Read?
> Write? Execute?
I am not sure about all scenarios, but in mine, /var/lib/rt3 (which IMO should
actually be /var/cache/rt3, but I had changed it to /var/lib to work around
SELinux deficits) is essentally only used by Mason. 
Both for writing and reading (It's a cache). I am not sure about executing.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.