[Pkg-salt-team] Bug#777664: Bug#777664: Bug#777664: salt-minion: Make log file readable by adm group

[Benjamin Drung]

Am Sonntag, den 15.02.2015, 00:03 +1100 schrieb Joe Healy:
> Hi Ben,
> 
> On Wed, Feb 11, 2015 at 9:18 PM, Benjamin Drung
> <benjamin.drung at profitbricks.com> wrote:
> 
>     > I'll make these changes. You are partially right - I/we do need a
>     > sponsor, but I haven't asked for one yet as I want to make sure the
>     > latest addition to the packaging (salt-api) is ok before I do (hence
>     > the -3...).
> 
> Working through the patch, setting the directory mode to 2750 causes
> the lintian issue non-standard-dir-perm. Is this needed? I'm not sure
> I follow the reason for it (the directory permission change).

Yes, this change is needed. A root:adm owned directory with mode 2750
gives root the permission to read and write to that directory and the
group adm to read. Thanks to setgid, files written to the directory by
root:root processes are stored as root:adm.

The samba package does the (nearly) same and overrides the lintian
warning:
====================================================
# This is on purpose to hide sensitive information
samba-common: non-standard-dir-perm var/log/samba/ 0750 != 0755
====================================================

-- 
Benjamin Drung
System Developer

ProfitBricks GmbH - The IaaS-Company
Greifswalder Str. 207
D - 10405 Berlin

Mail: benjamin.drung at profitbricks.com
Fax:  +49 30 577 008 598
URL:  http://www.profitbricks.com

Sitz der Gesellschaft: Berlin.
Registergericht: Amtsgericht Charlottenburg, HRB 125506 B.
Geschäftsführer: Andreas Gauger, Achim Weiss.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-salt-team/attachments/20150218/46fdd2a3/attachment.sig>