Overview

Request 1041833 accepted

No description set
Loading...

Callum Farmer's avatar

No %config in /usr

%config %{_distconfdir}


Johannes Meixner's avatar
author source maintainer

Why can files in /usr not be marked as RPM %config files? Usually config files are in /etc but that is not my point. My point is why '%config /usr/...' is forbidden? Is there an openSUSE packaging URL that forbids it?


Fabian Vogt's avatar

/usr is completely package owned, admins must not write into it.


Johannes Meixner's avatar
author source maintainer

Yes, I understand that admins should not modify vendor config files in /usr but admins are 'root' so they can do it and they are allowed to do whatever they like with their systems (they own their systems - not we). When admins modify "our" config files in /usr then %config could help them and us (e.g. SUSE support could see that "our" config files in /usr had been modified).


Jan Engelhardt's avatar

files in /usr WILL be overwritten by the package manager without exception. iff the admin does not want that, his config file (or fork thereof) MUST be in /etc.


Callum Farmer's avatar
When admins modify "our" config files in /usr then %config could help them and us (e.g. SUSE support could see that "our" config files in /usr had been modified).

1) Admins MUST NOT overwrite /usr ever: this is documented in most places

2) The actual issue was that having the files in /etc meant that the admin's copy and SUSE's copy existed in the same location which %config (or %config(noreplace)) is used to tell RPM how to handle this case and which file should actually exist at the specific filename. This usage is intentionally being changed so that SUSE's copy exists at /usr ALWAYS and is never modified and that admins as before will write to /etc and their changes aren't overwritten and co-exist with ours at the same time.

3) A package re-install / update would delete the changes so if a user did modify the /usr file and then asked SUSE Support - why did an update delete my modifications? - it's pretty clear they are editing the wrong file..

I understand that admins should not modify vendor config files in /usr but admins are 'root' so they can do it and they are allowed to do whatever they like with their systems

Being able to do something doesn't make it correct

Callum F (not employed by SUSE but have completed a lot of these changes)


Johannes Meixner's avatar
author source maintainer

Thank you for your explanation of the reasoning behind. Your request 1042360 is accepted and forwarded to openSUSE:Factory / cups as request 1042546.


Johannes Meixner's avatar
author source maintainer

I made a mistake regarding "SUSE support could see that 'our' config files in /usr had been modified": There is no need for %config for that because "rpm -V package_name" shows what files were modified.

Request History
Johannes Meixner's avatar

jsmeix created request


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Dominique Leuenberger's avatar

dimstar_suse set openSUSE:Factory:Staging:D as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:D"


Dominique Leuenberger's avatar

dimstar_suse accepted review

Picked "openSUSE:Factory:Staging:D"


Dominique Leuenberger's avatar

dimstar accepted review


Dominique Leuenberger's avatar

dimstar_suse accepted review

Staging Project openSUSE:Factory:Staging:D got accepted.


Dominique Leuenberger's avatar

dimstar_suse approved review

Staging Project openSUSE:Factory:Staging:D got accepted.


Dominique Leuenberger's avatar

dimstar_suse accepted request

Staging Project openSUSE:Factory:Staging:D got accepted.

openSUSE Build Service is sponsored by