who installs LFS root/user

Jean-François Le Ray jfleray at club-internet.fr
Tue Oct 10 08:46:23 PDT 2000


Matthias Benkmann wrote:
> 
> > > The only solution I could think of would be creating a user that might be
> > > admin.system or something like that (but would that not be against all rules?)
> >
> > This could be quite interesting. Such a user would do all the
> > installations. I suggest the user should be created after the setup of
> > LFS is completly done. He is the owner of the /usr/local tree and
> > therefore it would be possible to install things in the local tree but not to
> > overwrite LFS- Systemfiles. Especially not those 'hours-of-work'-/etc-
> > files ;-) Hope I think of this when I'm done with LFS.
> 
> Wouldn't it be useful to create a separate user for every package you
> install? The full name of the user would contain the package name and
> version, the home directory could be the src/ directory for the package
> (or the stow directory if you use stow) and the .plan file could contain
> installation notes like the ftp:// source for the package. That way a
> simple finger can identify every file in the system. All these users would
> be in a group that has write access to bin/, .... but the files in bin/,..
> would be chmod go-w.
> Now if I understand access rights correctly every package would be allowed
> to
> a) overwrite its own files
> b) create new files
> 
> but would not be allowed to delete or overwrite files that belong to other
> packages.
> Root access would only be required for adding a new user for a new package
> and for su'ing to the user. Neither the make install nor the following
> chmod to clear the group write flag would require root access.
> 

Call me dense, but some executables need to be installed suid root, 
and "make install" need write access to some "root" (/bin, /etc,
/usr/bin, ...)
directories.

How would it work if "make install" is executed as a standard user ?

			JF

-- 
Unsubscribe: send email to lfs-discuss-request at linuxfromscratch.org
and put unsubscribe in the subject header of the message




More information about the lfs-dev mailing list