Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2006-01-03 Thread Ian Jackson
Bastian Blank writes (Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices): 4) the two attached patches: - devmapper: export functions to set permissions - lvm2: add a config entry to overwrite the permissions for new devices I just try to get it acked

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2006-01-03 Thread Bastian Blank
On Tue, Jan 03, 2006 at 03:26:30PM +, Ian Jackson wrote: Thanks for your patches. I don't have time right know to look at the technicalities in detail. I did not get any response about the patches from upstream yet. Do we have all of the relevant Debian LVM

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-24 Thread Raul Miller
On 12/23/05, Bastian Blank [EMAIL PROTECTED] wrote: Anyway, what are the problems with a default of 666? It fixes any of the problems. Is this a serious question? Access to group disk can be easily controlled by the system administrator. On some systems, only root has this access, on other

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-23 Thread Bastian Blank
On Sat, Dec 17, 2005 at 03:09:37PM +, Roger Leigh wrote: Bastian Blank [EMAIL PROTECTED] writes: On Sat, Dec 17, 2005 at 12:41:17PM +, Roger Leigh wrote: Which procedure? You seem to know something I don't know. (Overwrite means in my context: chmod of static devices or a MODE

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-23 Thread Bastian Blank
On Tue, Dec 20, 2005 at 12:35:00AM -0500, Raul Miller wrote: I'm trying to ask why you are unwilling to have devmapper disks provide a default of root.disk 660? Why can't you allow that to be the default? You can always make permissions less strict, you can't make them more strict, as the

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-23 Thread Roger Leigh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bastian Blank [EMAIL PROTECTED] writes: On Tue, Dec 20, 2005 at 12:35:00AM -0500, Raul Miller wrote: Is there some reason you can't have implement your personally preferred policy of root.root 600 on just your own system? Is there some reason

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-23 Thread Stephen Frost
* Bastian Blank ([EMAIL PROTECTED]) wrote: Is there some reason you can't have implement your personally preferred policy of root.root 600 on just your own system? Is there some reason for projecting your personal policies incompletely onto an arbitrary subset of debian's users? Hu? 10

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-23 Thread Bastian Blank
On Sun, Dec 11, 2005 at 04:47:26PM -0500, Raul Miller wrote: Here's what I currently see suggested: 1) change devmapper defaults -- patch rejected, no reason given 2) explicitly use udev -- problem, this doesn't work for 2.4 kernels (2.4 used devfs) 3) avoid using devmapper (but this is not a

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-19 Thread Raul Miller
On 12/17/05, Bastian Blank [EMAIL PROTECTED] wrote: On Fri, Dec 16, 2005 at 02:43:29PM -0500, Raul Miller wrote: On 12/16/05, Bastian Blank [EMAIL PROTECTED] wrote: On Wed, Dec 14, 2005 at 01:54:45PM +, Ian Jackson wrote: Are you saying that the current default permissions on (eg)

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-17 Thread Bastian Blank
On Fri, Dec 16, 2005 at 02:43:29PM -0500, Raul Miller wrote: On 12/16/05, Bastian Blank [EMAIL PROTECTED] wrote: On Wed, Dec 14, 2005 at 01:54:45PM +, Ian Jackson wrote: Are you saying that the current default permissions on (eg) /dev/hda* are insecure and therefore wrong ? Yes, I

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-17 Thread Roger Leigh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bastian Blank [EMAIL PROTECTED] writes: On Sat, Dec 17, 2005 at 12:41:17PM +, Roger Leigh wrote: Which procedure? You seem to know something I don't know. (Overwrite means in my context: chmod of static devices or a MODE setting in the

Re: Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-16 Thread Bastian Blank
On Wed, Dec 14, 2005 at 01:54:45PM +, Ian Jackson wrote: Bastian Blank writes (Re: Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices): On Tue, Dec 13, 2005 at 03:55:01PM +, Ian Jackson wrote: [Raul Miller:] 1) change devmapper defaults -- patch

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-16 Thread Raul Miller
On 12/16/05, Bastian Blank [EMAIL PROTECTED] wrote: On Wed, Dec 14, 2005 at 01:54:45PM +, Ian Jackson wrote: Are you saying that the current default permissions on (eg) /dev/hda* are insecure and therefore wrong ? Yes, I overwrite them on my machines. And what is your reason for being

Re: Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-14 Thread Ian Jackson
Bastian Blank writes (Re: Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices): On Tue, Dec 13, 2005 at 03:55:01PM +, Ian Jackson wrote: [Raul Miller:] 1) change devmapper defaults -- patch rejected, no reason given Certainly I agree that the defaults

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-13 Thread Ian Jackson
Raul Miller writes (Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices): I've been looking at these bugs, and I can see no good reason for the 600 permissions, nor the reason to avoid using the disk group. I basically agree, but I'm going to try to play devil's

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-13 Thread Guy Maor
I agree with your technical assessment, Ian. On 12/13/05, Ian Jackson [EMAIL PROTECTED] wrote: I think the committee's ruling should explicitly castigate the devmapper maintainer for failing to engage constructively with any of the submitters. But I disagree with this. I think such a

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-13 Thread Ian Jackson
Guy Maor writes (Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices): I agree with your technical assessment, Ian. Do you have an opinion about 660 vs 640 ? And the question of equivalence to root ? On 12/13/05, Ian Jackson [EMAIL PROTECTED] wrote: I think

Bug#342455: tech-ctte: Ownership and permissions of device mapper block devices

2005-12-11 Thread Raul Miller
I've been looking at these bugs, and I can see no good reason for the 600 permissions, nor the reason to avoid using the disk group. There also seems to be some huge confusion about where responsibility for setting permissions and group should be handled. Here's what I currently see suggested: