[arch-general] resurrecting srcpac

[Michael Klier]

Jason Chu wrote:
> On Sun, Jun 1, 2008 at 10:14 AM, Michael Klier <chi at chimeric.de> wrote:
> > Jason Chu wrote:
> >> Yeah, put those in your public repo too and then I'll release a new
> >> version of srcpac.
> >
> > Ok, almost finished, though one problem remains. Using nobody actually doesn't
> > work because when you su nobody -c <command> the system will enforce a
> > password change.
> >
> > That leaves 3 options: a) we use a dedicated srcpac user in case srcpac was
> > invoked by root or b) make the user configurable in /etc/srcpac.conf or c)
> > invoke makepkg using sudo -u nobody, that however will add sudo as dependency
> > to srcpac. Personally I think c) is the best of them.
> >
> > Other than that I've added the changes, but because of that missing bit the
> > version in my repo is not 100% functional at the moment.
> >
> > What do you think?
> >
> >    Michael
> 
> I don't mind sudo as a dependency: c) is fine.

OK then, I've applied that as well and updated the man page too. Now sudo is
used when invoked by root to drop privileges to nobody and su is used to drop
privilegs to the user who called srcpac via sudo (using su here to get the
environment right). From the tests I've done so far everything seems to work
well (though again, it wouldn't harm if someone maybe checked it too). I also
haven't touched the version number ;).

Regards
    Michael

-- 
Michael Klier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://archlinux.org/pipermail/arch-general/attachments/20080601/9482d29c/attachment.pgp>