[pkg-firebird-general] fixpermscommon on every upgrade?

[Damyan Ivanov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -=| Tamas TEVESZ,  6.03.2007 05:08 |=-
> if i'm reading the postinst right, upon upgrade, fixpermscommon is 
> called unconditionally.
>
> is this really necessary? i can't cite a situation which i would be 
> caught in right now (apart from one certain installation, but that guy 
> deserves it anyway), but in the past i was bitten not once and not 
> twice by (another) packages trying to outsmart the user.

The idea here is not to outsmart the user, but cover-up the mess by
firebird itself. The problem fixPermsCommon fixes is that in /some/
circumstances, files in /var/run/firebird/$VER are left owned by root,
making it impossible for the server to operate, since the server runs as
user firebird. These files are also created when you change the hostname
(they look like isc_{guard,init,lock}1.$hostname).

If I remember correctly, this was caused by running gsec by root on new
- -classic installs -- it created some lock-files without changing their
owner.

Perhaps it is not necessary to deal with /var/lib/firebird after setting
perms once (on new install).

How about this:

1) new install: all ownership/permissions are set

2) upgrade/reinstall/reconfigure:
/var/run/firebird/$VER is processed as it is now. It could be further
narrowed only to files firebird is supposed to create there -
isc_guard*, isc_init* and isc_lock*

This would address my lockfile concerns and your "infinity-find"
troubles. Plus, I really see how you may want different perms/owners for
database files.

> [...]
> perhaps have an idea how much does it take with several tens of 
> thousands of databases, each containing a couple of tens of tables (if 
> not, here's news for you: *a lot*). in the end i ended up nullifying 
> find, chown, chmod and the gang before each mysql upgrade, so it could 
> finish in like 2 minutes, instead of several hours(!).

You did file a bugreport, right? (/me hides under a rock)


	dam
- --
Damyan Ivanov                           Modular Software Systems
phone +359(2)928-2611, 929-3993              fax +359(2)920-0994
mobile +359(88)856-6067              JID dam at jabber.minus273.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF7QKAHqjlqpcl9jsRArXLAJ4sacGZdbi+vpBvrl1JCrZeW5ePmgCghAGF
rdJYQEi8eNDU9SfYe22WV4Q=
=DbVn
-----END PGP SIGNATURE-----