August 2026 - Arch-general - lists.archlinux.org

Follow recomendation of ordering for "/usr/lib/modules-load.d/*.conf" files
by EpicTux123 12 Aug '26

12 Aug '26

Hi there, I have noticed that some packages in my system, under "/usr/lib/modules-load.d/", are installed without a numerical prefix. https://man.archlinux.org/man/modules-load.d.5.en says: "It is recommended to prefix all filenames with a two-digit number and a dash to simplify the ordering. It is recommended to use the range 10-40 for configuration files in /usr/ and the range 60-90 for configuration files in /etc/ and /run/, to make sure that local and transient configuration files will always take priority over configuration files shipped by the OS vendor." In my specific system, I have noticed "bluez.conf", "ddcutil.conf", "fwupd-i2c.conf" and "i2c-tools.conf" as files that do not have a prefix in that folder, therefore not following the recommendation. I am not sure of what is the best method to address all of those files through some sort of general communication to all package mantainers, so I am writing to this list, because I think creating an issue on each package would not be a smart idea. My idea here is to get in touch with all relevant Package Mantainers so that they can take a look at their mantained projects, see if they have a configuration file that it is shipped with, and adjust accordingly to add the numerical prefix. Please let me know if there is a better place to do this, if not in this mailing list. Thanks. -EpicTux123

1 0

Post-transaction hooks, Creating temporary files - spamassassin ownership flagged?
by David C Rankin 12 Aug '26

12 Aug '26

All, System update today listed owenership problems with /var/lib/spamassassin being owned by spamd: but subdirectories owned by root:. This has never been a problem before as sa-update and sa-compile are run as root. The wiki[1] has changed showing these commands run as spamd now, but provides no information whatesoever on the change or how this is supposed to be accomplished: [spamd]$ /usr/bin/vendor_perl/sa-update && /usr/bin/vendor_perl/sa-compile The errors shown when the post-install hook, Creating temporary files are: :: Running post-transaction hooks... ( 1/11) Creating system user accounts... ( 2/11) Creating temporary files... Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/3.004002 (owned by root) during canonicalization of var/lib/spamassassin/3.004002. Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/4.000002 (owned by root) during canonicalization of var/lib/spamassassin/4.000002. Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/compiled (owned by root) during canonicalization of var/lib/spamassassin/compiled. Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/3.004004 (owned by root) during canonicalization of var/lib/spamassassin/3.004004. Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/3.004006 (owned by root) during canonicalization of var/lib/spamassassin/3.004006. Detected unsafe path transition /var/lib/spamassassin (owned by spamd) → /var/lib/spamassassin/3.004003 (owned by root) during canonicalization of var/lib/spamassassin/3.004003. error: command failed to execute correctly What is the new preferred way to run sa-update && sa-compile as user spamd? su? sudo? or some new systemd doas? [1] https://wiki.archlinux.org/title/SpamAssassin -- David C. Rankin, J.D.,P.E.

3 5

leave mailing list
by DoNotReply 09 Aug '26

09 Aug '26

leave mailing list

1 0

IRC is on libera.chat, why are freenode channels still active? (even unofficially)
by David C Rankin 06 Aug '26

06 Aug '26

All, Arch devs, Arch moved to libera.chat some time ago (year+?) Today I had an issue with spamassassin, so I had to get back on freenode to reach the spamassassin channel. The old channel tabs for #archlinux, #archlinux-devops and #archlinux-unregistered were saved in freenode, and checking, there is still activity and a significant number of users there: #archlinux - 80 users #archlinux-unregistered - 14 users It says "Unofficial", but is that something you are aware of? E.g. * Now talking on #archlinux * Topic for #archlinux is: welcome to #archlinux. Unofficial archlinux community. Discussion and support. -- This channel is idle alot, please see #linux for help * Topic for #archlinux set by riddle!riddle@PyLink/admin (Sun Jun 15 12:09:13 2025) I'm sure somebody is happy to make use of the old channel on freenode, and I'm sure there isn't anything wrong with it, but I was very surprised to find them still active when I went to delete them. It was strange enough that I thought I'd bring it to the list, so at least Arch was aware of its continued use. -- David C. Rankin, J.D.,P.E.

1 0

makepkg as user
by Ralf Mardorf 04 Aug '26

04 Aug '26

Hi, if I understand correctly, during the recent attack on the AUR, PKGBUILDs were manipulated in such a way that they executed a malicious programme via sudo during the build process. If that is the case, couldn’t we protect ourselves by using an alias in the form of sudo -k && makepkg to prevent sudo from being executed automatically during the build? Provided, of course, that a timestamp is set to require a password. I’ve also posted my request on the AUR general list. However, I don’t think it can do any harm to raise this issue on this list as well. Have I missed something? Regards, Ralf

7 14