DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=PomH/ld3L9+3fXhYwL/W6c0+9V1jjJyePRgyueQ5CvmKdGla5x5q3
	jU345oCgooOImjfWwdfa4O1IE6Ca5yvCpwFh4+0Xwk9CvmNaOY23fuZbw9p9ZqWi
	FVYsiRvJvw+fgf+nEgMRJpmTEG58CKb2ZT3NJuChn++jFAHYzuj5Sw=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 18 Jun 2014 01:35:13 -0400
From: Christopher Faylor <cgf-use-the-mailinglist-please@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Website: Package listing not working + cygport query
Message-ID: <20140618053513.GD4920@ednor.casa.cgf.cx>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <5395FA98.5050005@tiscali.co.uk> <20140617143111.GF7138@ednor.casa.cgf.cx> <20140617153200.GA6910@ednor.casa.cgf.cx> <53A11DDD.6050102@cygwin.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <53A11DDD.6050102@cygwin.com>
User-Agent: Mutt/1.5.20 (2009-06-14)

On Wed, Jun 18, 2014 at 12:04:29AM -0500, Yaakov Selkowitz wrote:
>On 2014-06-17 10:32, Christopher Faylor wrote:
>> I'm surprised that I haven't seen this before: The name that you used to
>> generate your packages was "David Stacey/None".  My parser wasn't
>> expecting a name with a space and I didn't detect the fact that the
>> parsing failed (#($& just realized that I forgot to fix that).  So it
>> was just outputting a '0' size, one per line.
>>
>> Yaakov, wouldn't it make sense not to just use 0/0 as user/group when
>> generating packages with cygport by forcing --owner=0, --group=0 to the
>> tar command?  I'm not suggesting that this is the right way to fix this
>> particular problem but I don't think it's a good idea to leak people's
>> names and groups out onto the interwebs if we can help it.  It will also
>> make the packages slightly smaller.
>
>That would undermine any legitimate specification of gid/uid.  I would 
>like to see how this is handled in the Linux distros first.

I don't see how the random uid/gids of a user would ever be legitimate.
Some released rpm packages do contain (incorrectly, imo) the uid/gid of
the build system that created them but rpm does have a mechanism for
specifying ownership.  If it was really important that arbitrary
ownership must be assigned for some package then it seems like that
would be another cygport enhancement since there is no easy way for
a package maintainer to force their uid to some other value.

cgf

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple