Changes committed to git://oss.sgi.com/kenj/pcp.git dev
GNUmakefile | 4 ++--
debian/pcp.postinst.tail | 4 ++++
qa/src/mkpermslist | 10 +++++++++-
qa/src/permslist | 5 +++--
src/pmcd/rc_pmcd | 2 +-
src/pmlogger/pmlogger_daily.sh | 2 +-
6 files changed, 20 insertions(+), 7 deletions(-)
commit 91504368ffde683de040ee80b4ab5a056e820d6d
Author: Ken McDonell <kenj@xxxxxxxxxxxxxxxx>
Date: Thu Jul 25 10:35:12 2013 +1000
qa/permslist - changes
Track recent changes in the source makefiles for the pmda indom
cache directory and make the pmwebd log directory optional.
commit 27bb4b37a59f3bbb704705b9df391d4657d7938d
Author: Ken McDonell <kenj@xxxxxxxxxxxxxxxx>
Date: Thu Jul 25 10:33:46 2013 +1000
/var/run/pcp permissions changes
When created at run-times, make the mode and permissions match
those in the makefile
commit d089a61ab7e52fda3db1c74c11e3d6bb7d799d38
Author: Ken McDonell <kenj@xxxxxxxxxxxxxxxx>
Date: Thu Jul 25 10:31:24 2013 +1000
debian/postinst - track pmda cache permissions change
Anything installed not uid root and gid root needs special care
and feeding here ... change to track the recent pmda cache dir
change in the top-level makefile.
commit 70ae8f2ad6e421bce6eb9a1b2212f96ae2af8a26
Author: Ken McDonell <kenj@xxxxxxxxxxxxxxxx>
Date: Thu Jul 25 10:24:30 2013 +1000
GNUmakefile - change user for pmda cache
As a general rule, if we need non-root things, then I'd favour
setting uid to pcp _and_ gid to pcp and mode to 775 (dirs) or 664 (files).
This would (a) be a consistent policy with exceptions, rather than totally
ad hoc, and (b) more importantly, means we have independent entitlements
that could be use if we need 'em, e.g. in the case where something _has_
to run as some user other than root or pcp, they could be in group pcp
and still do what needs to be done.
|