Package: devscripts
Version: 2.10.35
Severity: normal
Tags: patch

Hi people (esp. Ron),

debrsign is called with root@ login unconditionally, which defeats the
goal of BUILDD_ROOTCMD. :) Please find attached a patch to fix this.
Since the .changes/.dsc files are already owned by BUILDD_USER, it's OK
to debrsign them, even if /var/cache/pbuilder/result has its original
permissions (rwxr-xr-x for root:root). I chose to copy the test used for
the ssh command lines 185-189.

Cheers,

-- 
Cyril Brulebois
--- a/scripts/cowpoke.sh
+++ b/scripts/cowpoke.sh
@@ -197,7 +197,11 @@
        read -e yesno
        case "$yesno" in
            YES | yes)
-               debsign "-k$SIGN_KEYID" -r "[EMAIL PROTECTED]" 
"$RESULT_DIR/${PACKAGE}_$CHANGES"
+               if [ -z "$BUILDD_ROOTCMD" ] ; then
+                   debsign "-k$SIGN_KEYID" -r "[EMAIL PROTECTED]" 
"$RESULT_DIR/${PACKAGE}_$CHANGES"
+               else
+                   debsign "-k$SIGN_KEYID" -r "[EMAIL PROTECTED]" 
"$RESULT_DIR/${PACKAGE}_$CHANGES"
+               fi
 
                if [ -n "$UPLOAD_QUEUE" ]; then
                    while true; do

Reply via email to