[Mageia-dev] [changelog] [RPM] cauldron core/release nfs-utils-1.2.6-2.mga3

[Colin Guthrie]

'Twas brillig, and Olivier Blin at 13/06/12 23:26 did gyre and gimble:
> Guillaume Rousse <guillomovitch at gmail.com> writes:
> 
>> Le 12/06/2012 09:41, Thierry Vignaud a écrit :
>>> On 11 June 2012 22:22, guillomovitch <buildsystem-daemon at mageia.org> wrote:
>>>> guillomovitch <guillomovitch> 1:1.2.6-2.mga3:
>>>> + Revision: 259882
>>>> - add exports.d directory
>>>> - use /var/lib/nfs/statd for statd, instead of /var/lib/nfs, as in fedora
>>>> - add modprobe config file to alias 'nfs4' to 'nfs'
>>>> - add systemd support
>>>> - drop sysinit support
>>>> - merge client and server package, as per redhat setup
>>>
>>> Now installing a kernel spits those messages:
>>> libkmod: conf_files_filter_out: Directories inside directories are not
>>> supported: /lib/modprobe.d/nfs.conf
>>> (...)
>> We currently have no such /lib/modprobe.d directory in the
>> distribution, only /etc/modprobe.d. I guess our kmod package doesn't
>> support it yet, but should sooner or later. If I'm wrong, it's easy to
>> switch back to /etc/modprobe.d instead.
> 
> Actually, you installed the file as /lib/modprobe.d/nfs.conf/nfs.conf
> I've removed the extra directory level.
> 
> But we should probably use /etc/modprobe.d/nfs.conf instead.

IMO we should not use /etc/ here. /etc/ should be the domain of
administrator changes. IMO packages should always use /lib/ (or
eventually /usr/lib/) for such things. I've been pushing for this proper
separation for a while. udev and systemd do it properly although we do
still ship several udev files in /etc/udev/rules.d/ in packages which
should, by rights, be in /lib/udev/rules.d/

dbus upstream is still a big offender with policy files often ending up
in /etc/dbus-1/system.d/ rather than in a /lib/ tree. This can and does
sometimes have security implications, e.g. with the privilege escalation
I recently reported regarding sectool:
https://bugzilla.redhat.com/show_bug.cgi?id=809437

The policy file in question was marked with %config(noreplace) as it was
in /etc. But really this is a policy file which shouldn't be modified by
users. Therefore it shouldn't be marked as noreplace and it shouldn't
live in /etc/


So, if the /lib/modprobe.d/ dir isn't parsed by kmod, we should fix kmod.

That's my opinion anyway :)

Col

-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/