[Bug 169247] Review request: rt3 - Request tracker 3

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review request: rt3 - Request tracker 3


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169247





------- Additional Comments From paul at city-fan.org  2005-10-13 05:57 EST -------
(In reply to comment #8)
> > > W: rt3 dangerous-command-in-%postun userdel
> > > 
> > > I'll leave this one alone.  The package creates the user in %pre, it's only
> > > right that the user is removed when no longer needed, I suppose.
> > 
> > See
> > https://www.redhat.com/archives/fedora-extras-commits/2005-June/msg00271.html
> > for why users and groups shouldn't be removed when a package is uninstalled.
> Then you probably know my attitude on this topic. 
> 
> The rt3 user is a local system account (!) and is not meant to be used across
> networks. Also, the rt3 package has all files being own by the rt3 user under
> its control.

The issue is nothing to do with networks; leaving the user there ensures that
any files left that are owned by the "rt3" user after deletion of the rt3
package are still owned by the "rt3" user if the package is subsequently
reinstalled. If the account is deleted on uninstall, the reinstallation may
result in a new rt3 user being created with a different UID to the original one

> > > I ran into SELinux issues when starting httpd.
> And so do I. I have _never_ been able to use httpd without switching SELinux off
> for it. With having switched SELinux off for httpd I am able to run rt3 without
> any problems.

I'm using httpd with SELinux without problems, albeit only serving static pages
and a few cgi scripts. I know though that more complex packages such as
squirrelmail can work with SELinux enabled too.

> > If you know what the contexts should be for this directory and its contents, you
> > could raise the issue on fedora-selinux-list or in bugzilla for one of the
> > policy packages and hopefully get the right contexts set by default in an
> > updated version of the policy packages. That has to be better than manually
> > setting contexts (which would need fixing again after a relabel).
> ... some SELinux geek will have to implement this ;)

What does the package do with the files/directories in /var/lib/rt3? Read?
Write? Execute?



-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.