1 |
Hello all, I'm sorry to bring this here, but I don't know where else |
2 |
to take it, and feel that I was treated really unfairly. |
3 |
|
4 |
As you know, I recently inquired about ebuild development on this |
5 |
list, and mentioned vpopmail. Jory Pratt answered my mail and |
6 |
suggested that I submit a patch. |
7 |
|
8 |
I then spent some time working on the ebuild, and in doing so, |
9 |
discovered that the postgres support in vpopmail was not very good |
10 |
at all, so I wrote back to Jory, and said that I was going to hold |
11 |
off working on the ebuild since I am currently working with the |
12 |
vpopmail team to improve vpopmail itself. Jory wrote this rather |
13 |
rude reply: |
14 |
|
15 |
------------------- |
16 |
Casey Allen Shobe wrote: |
17 |
> Well I patched the ebuild and got it working, but I'm so terribly |
18 |
> disappointed with vpopmail's horrible postgresql support that I |
19 |
> don't think I'll be using it at all until I rewrite it. :P |
20 |
> |
21 |
> Ah well, thanks anyways. I'll let you know when/if they let me |
22 |
> fix vpopmail (already posted about it on the list). |
23 |
|
24 |
The will not allow it and I will not allow someone to go fooling in |
25 |
an ebuild I maintain. Not trying to be an ass here but we have |
26 |
something called respect for others when it comes to the tree and |
27 |
what they maintain. |
28 |
> |
29 |
> One suggestion for you, some servers (i.e. qmail-smptd) runs as a |
30 |
> non-root user, so they will fail to authenticate |
31 |
> unless /var/vpopmail/bin/vchkpw is SUID. I have a script that |
32 |
> runs once a minute on my machines and makes this file +s if it's |
33 |
> not because I've dealt with this problem so much (mail server |
34 |
> breaks every time I rebuild vpopmail). |
35 |
|
36 |
Default install is setup as setuid seeing we know this already. |
37 |
Useless info like this tells me you do not understand the |
38 |
permissions that are being set in the ebuild. |
39 |
> |
40 |
> I would strongly recommend doing chmod +s /var/vpopmail/bin/vchkpw |
41 |
> in the ebuild, and then if the end user doesn't want it SUID, then |
42 |
> that's what FEATURES=suidctl is for. |
43 |
|
44 |
This is not how we can handle this the user should have already read |
45 |
up on how to setup vpopmail before ever installing it, which means |
46 |
they would already know that SUID is required. |
47 |
------------------- |
48 |
|
49 |
So, I wrote the following response, which I feel was courteous |
50 |
enough given the situation: |
51 |
|
52 |
------------------- |
53 |
On Tuesday 19 July 2005 16:09, you wrote: |
54 |
> The will not allow it and I will not allow someone to go fooling |
55 |
> in an ebuild I maintain. Not trying to be an ass here but we have |
56 |
> something called respect for others when it comes to the tree and |
57 |
> what they maintain. |
58 |
|
59 |
Umm look, you ARE being an ass, and I don't appreciate it as I'm |
60 |
only trying to help. |
61 |
|
62 |
A> I was simply offering you help - adding support for a postgres |
63 |
use flag to the ebuild that called appropriate configure options |
64 |
and such. I have no intent of hacking up vpopmail source outside |
65 |
of the main distribution. |
66 |
|
67 |
B> You are not one to say whether the vpopmail team will or will not |
68 |
accept my patches - I believe they will as my intent is to make |
69 |
vpopmail a better product, and members of their development team |
70 |
have already been welcoming and helpful in discussing the best way |
71 |
to redesign things. It's no secret to the vpopmail team that the |
72 |
postgresql support is lacking flexibility and has some bugs, and is |
73 |
simply hacked together quickly by people who wanted it to work, and |
74 |
didn't care much for ease of use or configurability. Try it |
75 |
yourself, I'm sure you'll be disappointed. It's simply not as |
76 |
configurable as the mysql option, and neither mysql or postgresql |
77 |
allow customizing the backend table format without editing i.e. |
78 |
vpgsql.h for postgres. |
79 |
|
80 |
> Default install is setup as setuid seeing we know this already. |
81 |
> Useless info like this tells me you do not understand the |
82 |
> permissions that are being set in the ebuild. |
83 |
|
84 |
Umm, no it's not, and it's not useless info. I reported the bug to |
85 |
the gentoo-dev list some months ago, but should have probably used |
86 |
bugs.gentoo.org instead. In any case, it's certainly not installed |
87 |
setuid by default: |
88 |
|
89 |
# emerge -va vpopmail && ls -l /var/vpopmail/bin/vchkpw |
90 |
|
91 |
These are the packages that I would merge, in order: |
92 |
|
93 |
Calculating dependencies ...done! |
94 |
[ebuild R ] net-mail/vpopmail-5.4.6-r1 +clearpasswd -ipalias |
95 |
-mysql -postgres 0 kB [1] |
96 |
[...] |
97 |
>>> net-mail/vpopmail-5.4.6-r1 merged. |
98 |
[...] |
99 |
-rwx--x--x 1 root root 85036 Jul 19 23:53 /var/vpopmail/bin/vchkpw* |
100 |
|
101 |
So stop telling me my info is useless, when it's obviously not. |
102 |
|
103 |
> This is not how we can handle this the user should have already |
104 |
> read up on how to setup vpopmail before ever installing it, which |
105 |
> means they would already know that SUID is required. |
106 |
|
107 |
As SUID is required for qmail-smtpd, vchkpw should indeed be |
108 |
installed SUID by default unless overridden by using suidctl. This |
109 |
is NOT the case now. |
110 |
------------------- |
111 |
|
112 |
I then received this lovely mail from Jory: |
113 |
|
114 |
------------------- |
115 |
You want to curse me and tell me you think your gonna go playing in |
116 |
my vpopmail ebuild you can take your bullshit upstream I am black |
117 |
listing you on my filters so I do not need to read your bullshit |
118 |
you do not understand the full picture if you did you would know |
119 |
vpopmail works with more then just qmail you dumb ass. So have a |
120 |
nice Day chow!! |
121 |
------------------- |
122 |
|
123 |
Umm look I'm just trying to help here, and I really feel like I've |
124 |
been treated very unfairly by this developer. I'm working hard to |
125 |
try to make vpopmail AND gentoo better products, I'd really |
126 |
appreciate not being told on things I know very well that I'm right |
127 |
about, and getting severe reactions like this when I prove that my |
128 |
statements were indeed correct and that I'm only trying to help. |
129 |
|
130 |
I really feel that this response whas wholly unjustified, and that I |
131 |
did nothing to warrant it. Please advise. |
132 |
|
133 |
Cheers, |
134 |
-- |
135 |
Casey Allen Shobe | http://casey.shobe.info |
136 |
cshobe@×××××××××××××.com | cell 425-443-4653 |
137 |
AIM & Yahoo: SomeLinuxGuy | ICQ: 1494523 |
138 |
SeattleServer.com, Inc. | http://www.seattleserver.com |
139 |
-- |
140 |
gentoo-dev@g.o mailing list |