OpenPKG Specs: changeset 178:0ba300bdf30a

Change unfortunate but partly useful overreaching security tradeoff.
The principle of allocating each running process an individual system
user and group can have security benefits, however maintining a plethora
of users, groups, processes, file modes, file permissions, and even
nonportable file ACLs on a host serving from a hundred processes has
some security disadvantages. This tradeoff is even worse for systems
like OpenPKG which benefit from administration transparency through the
use of minimal system intrusion and only three usage privilege levels.

     1.1 --- a/postfix/postfix.spec	Mon Apr 20 12:49:50 2009 +0200
     1.2 +++ b/postfix/postfix.spec	Mon Apr 20 19:22:00 2009 +0200
     1.3 @@ -1,6 +1,6 @@
     1.4  ##
     1.5  ##  postfix.spec -- OpenPKG RPM Package Specification
     1.6 -##  Copyright (c) 2000-2008 OpenPKG Foundation e.V. <http://openpkg.net/>
     1.7 +##  Copyright (c) 2000-2009 OpenPKG Foundation e.V. <http://openpkg.net/>
     1.8  ##
     1.9  ##  Permission to use, copy, modify, and distribute this software for
    1.10  ##  any purpose with or without fee is hereby granted, provided that
    1.11 @@ -37,7 +37,7 @@
    1.12  Group:        Mail
    1.13  License:      IPL
    1.14  Version:      %{V_postfix}
    1.15 -Release:      20090406
    1.16 +Release:      20090418
    1.17  
    1.18  #   package options
    1.19  %option       with_fsl       yes
    1.20 @@ -142,6 +142,11 @@
    1.21      %patch -p0
    1.22      ( cd pflogsumm-%{V_pflogsumm} && %{l_patch} -p0 -b <%{PATCH1} ) || exit $?
    1.23  
    1.24 +    #   remove OpenPKG privelege model incompatible exit conditions
    1.25 +    %{l_shtool} subst \
    1.26 +        -e 's;msg_fatal\(.*attribute specifies mail system\);msg_info\1;g' \
    1.27 +        src/pipe/pipe.c
    1.28 +
    1.29      #   apply vendor WHOSON patch
    1.30  %if "%{with_whoson}" == "yes"
    1.31      %patch -p0 -P 2

OpenPKG Specs / changeset

changeset

Change unfortunate but partly useful overreaching security tradeoff.