>>>>> "CH" == Chris Hassell <[email protected]> writes:

CH> Most build systems these days recommend building entirely as a
CH> normal user (even Debian?) and the chown-and-other-ops are done with
CH> careful setuid privileges given to the build system.

CH> RPM and rpmbuild have been doing it that way for years.

Technically RPM doesn't even do that; none of the package build process
is ever done as root.  The proper ownership of the files is stored as
package metadata which gets applied when the package is installed.  The
ownership of the files at build time is immaterial.

We (Fedora and by extension RHEL) used to patch things so that the
Amanda makefile wouldn't try to call chown/chgrp.  Now we pass
BINARY_OWNER and SETUID_GROUP to the makefile with the current user info
so that those calls do nothing (which saves us from having to maintain a
patch).

 - J<

Reply via email to