- Aur-general - lists.archlinux.org

[aur-general] Software packaging - Security question
by Nuno Araujo 10 Jan '13

10 Jan '13

Hi I am trying to create a package for the subvein[1] game. Installation instructions[2] of the game tell to simply uncompress the tar.gz archive in a folder and run the "Subvein" program. No problem with that. But then when running the game, it tries to store information in it's "data" folder (logs, configuration, user profiles...). We have a permission problem. To workaround this problem, I: - Create a group named "subvein"; - set the setgid bit for the game "data" folder and all it's sub-folders; - set the game "data" folder and all it's content group writable; - set the group of the game "data" folder to the "subvein" group. - Created a wrapper bash script that changes the umask to 002 and then launches the game. This way, all the contents created by the game will belong to the "subvein" group and will be group writable, so that anyone can use the game. Is this a valid way of doing it? Are there any security concerns I need to take into account? The game has also a "server" part. I still didn't started to handle this in the package, but was thinking to do the following: - Create a user names subvein that belongs only to the subvein group. - Create a systemd .service file that runs the server program as the subvein user. Does this seems OK as approach? Thank you for your help. P.S. You can find my "draft" of the PKGBUILD, the install script and the bash wrapper attached. [1] http://subvein.net/ [2] http://subvein.net/download.php -- Nuno Araujo <nuno.araujo(a)russo79.com>

3 5

[aur-general] Delete request: gstreamer0.10-good-slim
by Jiajun Wang 10 Jan '13

10 Jan '13

The package has been orphaned for more than one year. The maintainer posted in the comments that it is not needed any more. https://aur.archlinux.org/packages/gstreamer0.10-good-slim/ -- Regards, Wang Jiajun

2 1

[aur-general] Delete Request: tp_smapi-builder
by William Giokas 10 Jan '13

10 Jan '13

This package[0] has been in the AUR for almost a year and a half, and the maintainer posted in the comments that it should be deleted then disowned the package. [0] https://aur.archlinux.org/packages/tp_smapi-builder/ Thank you, -- William Giokas | KaiSforza GnuPG Key: 0xE99A7F0F Fingerprint: F078 CFF2 45E8 1E72 6D5A 8653 CDF5 E7A5 E99A 7F0F

2 1

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 10 Jan '13

10 Jan '13

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 6 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 40 packages missing signoffs * 20 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (6 total) == * gambas2-2.24.0-9 (i686) * gambas3-3.3.4-3 (i686) * pdf2djvu-0.7.16-1 (i686) * gambas2-2.24.0-9 (x86_64) * gambas3-3.3.4-3 (x86_64) * pdf2djvu-0.7.16-1 (x86_64) == Incomplete signoffs for [community] (36 total) == * blender-6:2.65a-3 (i686) 0/2 signoffs * catalyst-dkms-12.11-3 (i686) 0/2 signoffs * catalyst-utils-12.11-2 (i686) 0/2 signoffs * cdfs-2.6.27-34 (i686) 0/2 signoffs * fatrat-1.2.0_beta2-3 (i686) 0/2 signoffs * fcron-3.1.1-1 (i686) 0/2 signoffs * gambas2-2.24.0-9 (i686) 0/2 signoffs * gambas3-3.3.4-3 (i686) 0/2 signoffs * ndiswrapper-1.57-27 (i686) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (i686) 0/2 signoffs * openimageio-1.1.2-1 (i686) 0/2 signoffs * pdf2djvu-0.7.16-1 (i686) 0/2 signoffs * r8168-8.034.00-2 (i686) 0/2 signoffs * rt3562sta-2.4.1.1-21 (i686) 0/2 signoffs * tp_smapi-0.41-12 (i686) 0/2 signoffs * vhba-module-20120422-15 (i686) 0/2 signoffs * virtualbox-modules-4.2.6-4 (i686) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (i686) 0/2 signoffs * blender-6:2.65a-3 (x86_64) 0/2 signoffs * catalyst-dkms-12.11-3 (x86_64) 0/2 signoffs * catalyst-utils-12.11-2 (x86_64) 0/2 signoffs * cdfs-2.6.27-34 (x86_64) 0/2 signoffs * fatrat-1.2.0_beta2-3 (x86_64) 0/2 signoffs * fcron-3.1.1-1 (x86_64) 0/2 signoffs * gambas2-2.24.0-9 (x86_64) 0/2 signoffs * gambas3-3.3.4-3 (x86_64) 0/2 signoffs * ndiswrapper-1.57-27 (x86_64) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (x86_64) 0/2 signoffs * openimageio-1.1.2-1 (x86_64) 0/2 signoffs * pdf2djvu-0.7.16-1 (x86_64) 0/2 signoffs * r8168-8.034.00-2 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1-21 (x86_64) 0/2 signoffs * tp_smapi-0.41-12 (x86_64) 0/2 signoffs * vhba-module-20120422-15 (x86_64) 0/2 signoffs * virtualbox-modules-4.2.6-4 (x86_64) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (4 total) == * llvm-amdgpu-snapshot-20130104-1 (i686) 0/2 signoffs * openshadinglanguage-1.2.1-1 (i686) 0/2 signoffs * llvm-amdgpu-snapshot-20130104-1 (x86_64) 0/2 signoffs * openshadinglanguage-1.2.1-1 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (20 total) == * catalyst-utils-12.11-2 (i686), since 2012-12-05 * catalyst-utils-12.11-2 (x86_64), since 2012-12-05 * vhba-module-20120422-15 (i686), since 2012-12-11 * vhba-module-20120422-15 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (i686), since 2012-12-11 * cdfs-2.6.27-34 (x86_64), since 2012-12-11 * cdfs-2.6.27-34 (i686), since 2012-12-11 * r8168-8.034.00-2 (i686), since 2012-12-11 * r8168-8.034.00-2 (x86_64), since 2012-12-11 * catalyst-dkms-12.11-3 (i686), since 2012-12-14 * catalyst-dkms-12.11-3 (x86_64), since 2012-12-14 * virtualbox-modules-4.2.6-4 (i686), since 2012-12-25 * virtualbox-modules-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (i686), since 2012-12-25 == Top five in signoffs in last 24 hours ==

1 0

[aur-general] Delete request
by zonadomarquinhos 09 Jan '13

09 Jan '13

Delete this packages, they already exist in oficial package [community]: https://aur.archlinux.org/packages/dmz-cursor-theme https://aur.archlinux.org/packages/pip/ Thanks!

2 1

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 09 Jan '13

09 Jan '13

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 2 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 36 packages missing signoffs * 20 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (2 total) == * chmsee-1.99.15-2 (i686) * chmsee-1.99.15-2 (x86_64) == Incomplete signoffs for [community] (32 total) == * blender-6:2.65a-3 (i686) 0/2 signoffs * catalyst-dkms-12.11-3 (i686) 0/2 signoffs * catalyst-utils-12.11-2 (i686) 0/2 signoffs * cdfs-2.6.27-34 (i686) 0/2 signoffs * chmsee-1.99.15-2 (i686) 0/2 signoffs * fatrat-1.2.0_beta2-3 (i686) 0/2 signoffs * fcron-3.1.1-1 (i686) 0/2 signoffs * ndiswrapper-1.57-27 (i686) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (i686) 0/2 signoffs * openimageio-1.1.2-1 (i686) 0/2 signoffs * r8168-8.034.00-2 (i686) 0/2 signoffs * rt3562sta-2.4.1.1-21 (i686) 0/2 signoffs * tp_smapi-0.41-12 (i686) 0/2 signoffs * vhba-module-20120422-15 (i686) 0/2 signoffs * virtualbox-modules-4.2.6-4 (i686) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (i686) 0/2 signoffs * blender-6:2.65a-3 (x86_64) 0/2 signoffs * catalyst-dkms-12.11-3 (x86_64) 0/2 signoffs * catalyst-utils-12.11-2 (x86_64) 0/2 signoffs * cdfs-2.6.27-34 (x86_64) 0/2 signoffs * chmsee-1.99.15-2 (x86_64) 0/2 signoffs * fatrat-1.2.0_beta2-3 (x86_64) 0/2 signoffs * fcron-3.1.1-1 (x86_64) 0/2 signoffs * ndiswrapper-1.57-27 (x86_64) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (x86_64) 0/2 signoffs * openimageio-1.1.2-1 (x86_64) 0/2 signoffs * r8168-8.034.00-2 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1-21 (x86_64) 0/2 signoffs * tp_smapi-0.41-12 (x86_64) 0/2 signoffs * vhba-module-20120422-15 (x86_64) 0/2 signoffs * virtualbox-modules-4.2.6-4 (x86_64) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (4 total) == * llvm-amdgpu-snapshot-20130104-1 (i686) 0/2 signoffs * openshadinglanguage-1.2.1-1 (i686) 0/2 signoffs * llvm-amdgpu-snapshot-20130104-1 (x86_64) 0/2 signoffs * openshadinglanguage-1.2.1-1 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (20 total) == * catalyst-utils-12.11-2 (i686), since 2012-12-05 * catalyst-utils-12.11-2 (x86_64), since 2012-12-05 * vhba-module-20120422-15 (i686), since 2012-12-11 * vhba-module-20120422-15 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (i686), since 2012-12-11 * cdfs-2.6.27-34 (x86_64), since 2012-12-11 * cdfs-2.6.27-34 (i686), since 2012-12-11 * r8168-8.034.00-2 (i686), since 2012-12-11 * r8168-8.034.00-2 (x86_64), since 2012-12-11 * catalyst-dkms-12.11-3 (i686), since 2012-12-14 * catalyst-dkms-12.11-3 (x86_64), since 2012-12-14 * virtualbox-modules-4.2.6-4 (i686), since 2012-12-25 * virtualbox-modules-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (i686), since 2012-12-25 == Top five in signoffs in last 24 hours == 1. stephane - 7 signoffs 2. lcarlier - 3 signoffs 3. bisson - 2 signoffs 4. foutrelis - 1 signoffs

1 0

[aur-general] Various requests
by Doug Newgard 09 Jan '13

09 Jan '13

2 1

[aur-general] Deletion request
by Ivan de Jesús Pompa García 09 Jan '13

09 Jan '13

Hi everyone: Would be great if package alx-drive were removed from aur. The efforts are now merged into the package dkms-alx. Have a great day, Ivan

2 1

[aur-general] [MERGE] fdk-aac into libfdk-aac and fdk-aac-git into libfdk-aac-git
by lou＠fakeoutdoorsman.com 09 Jan '13

09 Jan '13

This is to differentiate the library other packages such as fdkaac-git. fdk-aac [1] into libfdk-aac [2] [1] https://aur.archlinux.org/packages/fdk-aac/ [2] https://aur.archlinux.org/packages/libfdk-aac/ fdk-aac-git [3] into libfdk-aac-git [4] [3] https://aur.archlinux.org/packages/fdk-aac-git/ [4] https://aur.archlinux.org/packages/libfdk-aac-git/ Thanks.

2 1

[aur-general] Please delete opus-tools
by Michael Düll 08 Jan '13

08 Jan '13

It has been moved to [community]. https://aur.archlinux.org/packages/opus-tools/ Michael Düll

2 1