DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=DWSkJsc64E7q/+DJmlDzhq/zcZK4Js3IzSyyX05/rWhkjr/RnOayF
	Vjpj2RweLkg6VswkvKV2/Fl76eHhpgLnBEgHQIN7m91SHwJgWkFBQrnP/fRcGvjN
	EThegaHgmOKBf5z5k+fjyC3PwGmASsakzDBAAdRs3IdA8mx3oW4fsc=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 18 Jun 2014 12:16:48 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Website: Package listing not working + cygport query
Message-ID: <20140618101648.GX23700@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <5395FA98.5050005@tiscali.co.uk> <20140617143111.GF7138@ednor.casa.cgf.cx> <20140617153200.GA6910@ednor.casa.cgf.cx> <53A11DDD.6050102@cygwin.com> <297930945.20140618133458@yandex.ru>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="JWOY2/vB4uO4FuME"
Content-Disposition: inline
In-Reply-To: <297930945.20140618133458@yandex.ru>
User-Agent: Mutt/1.5.23 (2014-03-12)

--JWOY2/vB4uO4FuME
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jun 18 13:34, Andrey Repin wrote:
> Greetings, Yaakov Selkowitz!
>=20
> >> Yaakov, wouldn't it make sense not to just use 0/0 as user/group when
> >> generating packages with cygport by forcing --owner=3D0, --group=3D0 t=
o the
> >> tar command?  I'm not suggesting that this is the right way to fix this
> >> particular problem but I don't think it's a good idea to leak people's
> >> names and groups out onto the interwebs if we can help it.  It will al=
so
> >> make the packages slightly smaller.
>=20
> > That would undermine any legitimate specification of gid/uid.  I would=
=20
> > like to see how this is handled in the Linux distros first.
>=20
> IMO, if you DO need to have specific ownership on specific files, you oug=
ht to
> use postinstall scripts to amend the situation to your expectations.
>=20
> P.S.
> The packages I personally know use 'install' to place specific files with
> specific uid/gid/access bits.

Another point is, the ownership of the files in the tar file is pretty
much useless.  They reflect another system with different user accounts,
and the installer (be it rpm or our setup) use different accounts to
create the files under anyway.  Setting the uid/gid values in our tar
files to some arbitrary fixed values like 0/0 or 544/544 is fine.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--JWOY2/vB4uO4FuME
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=WiHH
-----END PGP SIGNATURE-----

--JWOY2/vB4uO4FuME--