Subject: Re: #define name for non-root pkg_install tools
To: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
From: Todd Vierling <tv@duh.org>
List: tech-pkg
Date: 03/29/2004 14:24:05
On Mon, 29 Mar 2004, Hubert Feyrer wrote:

: > The diff follows.  Of course, I'd like to choose a different name for the
: > symbol and put it into pkgtools/pkg_install/Makefile, rather than potting an
: > OS-specific symbol there.  Is there a preferred naming convention here?  I
: > was thinking "PKG_INSTALL_AS_NONROOT", but that sounds clunky.
:
: Um, you can run the pkg_* tools as non-root on Unix systems very well.

Not "very well".  Two problems with the existing sources (you didn't read my
diff?):

* umask is set to 022 unconditionally in pkg_add.  In a gid-based
  administration system, this must be no more than 002.

* a warning is issed in pkg_delete if getuid() != 0.  This is rather
  pointless in a gid-based administration system, and doubly so under
  Interix where even "Administrator" is not uid 0.

: So it's system dependent - if the system in question doesn't really know
: how to do things w/o system privileges (and thus probably always runs as
: Administrator or so),

That's not how it works.  On Interix, "Administrator" does have system level
privileges, but so does any user of group "+Administrators".  Typically,
system management on such systems is not done as the single centralized user
"Administrator".

What do you think I should do with the changes to address the two issues
above?

-- 
-- Todd Vierling <tv@duh.org> <tv@pobox.com>