[Mageia-dev] [changelog] [RPM] cauldron core/release nfs-utils-1.2.6-2.mga3

Thu Jun 14 10:19:46 CEST 2012

'Twas brillig, and Olivier Blin at 13/06/12 23:26 did gyre and gimble:
+> Guillaume Rousse <guillomovitch at gmail.com> writes:
+> 
+>> Le 12/06/2012 09:41, Thierry Vignaud a écrit :
+>>> On 11 June 2012 22:22, guillomovitch <buildsystem-daemon at mageia.org> wrote:
+>>>> guillomovitch <guillomovitch> 1:1.2.6-2.mga3:
+>>>> + Revision: 259882
+>>>> - add exports.d directory
+>>>> - use /var/lib/nfs/statd for statd, instead of /var/lib/nfs, as in fedora
+>>>> - add modprobe config file to alias 'nfs4' to 'nfs'
+>>>> - add systemd support
+>>>> - drop sysinit support
+>>>> - merge client and server package, as per redhat setup
+>>>
+>>> Now installing a kernel spits those messages:
+>>> libkmod: conf_files_filter_out: Directories inside directories are not
+>>> supported: /lib/modprobe.d/nfs.conf
+>>> (...)
+>> We currently have no such /lib/modprobe.d directory in the
+>> distribution, only /etc/modprobe.d. I guess our kmod package doesn't
+>> support it yet, but should sooner or later. If I'm wrong, it's easy to
+>> switch back to /etc/modprobe.d instead.
+> 
+> Actually, you installed the file as /lib/modprobe.d/nfs.conf/nfs.conf
+> I've removed the extra directory level.
+> 
+> But we should probably use /etc/modprobe.d/nfs.conf instead.
+
+IMO we should not use /etc/ here. /etc/ should be the domain of
+administrator changes. IMO packages should always use /lib/ (or
+eventually /usr/lib/) for such things. I've been pushing for this proper
+separation for a while. udev and systemd do it properly although we do
+still ship several udev files in /etc/udev/rules.d/ in packages which
+should, by rights, be in /lib/udev/rules.d/
+
+dbus upstream is still a big offender with policy files often ending up
+in /etc/dbus-1/system.d/ rather than in a /lib/ tree. This can and does
+sometimes have security implications, e.g. with the privilege escalation
+I recently reported regarding sectool:
+https://bugzilla.redhat.com/show_bug.cgi?id=809437
+
+The policy file in question was marked with %config(noreplace) as it was
+in /etc. But really this is a policy file which shouldn't be modified by
+users. Therefore it shouldn't be marked as noreplace and it shouldn't
+live in /etc/
+
+
+So, if the /lib/modprobe.d/ dir isn't parsed by kmod, we should fix kmod.
+
+That's my opinion anyway :)
+
+Col
+
+-- 
+
+Colin Guthrie
+colin(at)mageia.org
+http://colin.guthr.ie/
+
+Day Job:
+  Tribalogic Limited http://www.tribalogic.net/
+Open Source:
+  Mageia Contributor http://www.mageia.org/
+  PulseAudio Hacker http://www.pulseaudio.org/
+  Trac Hacker http://trac.edgewall.org/
+
+
+