From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id WMblHsxT3WKxgQAAbAwnHQ (envelope-from ) for ; Sun, 24 Jul 2022 16:14:36 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id OO/mHsxT3WKTpwAA9RJhRA (envelope-from ) for ; Sun, 24 Jul 2022 16:14:36 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 04A84DB76 for ; Sun, 24 Jul 2022 16:14:36 +0200 (CEST) Received: from localhost ([::1]:36790 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oFcNP-00072j-6Q for larch@yhetil.org; Sun, 24 Jul 2022 10:14:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39634) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oFcNE-00072Y-3x for guix-devel@gnu.org; Sun, 24 Jul 2022 10:14:24 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:47100) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oFcNC-0007f4-78 for guix-devel@gnu.org; Sun, 24 Jul 2022 10:14:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=1P09HhfIgeOUn 8qj7A4vEu2ekKKyPVeYHWz9QdY/GF4=; h=references:in-reply-to:subject:to: from:date; d=tobias.gr; b=D9sd8kU8bN8d4EbcyWNtsNnzMd0ttFBUgyUZWOIDqOMB NlQRAvLUWjz0kW125v29s+NaZSVu5ulY0P5w6/wYdU+S8usUVTPWnFxIYzjfvYIEh9uuC2 1ISdIMrom9MLE6E+R5aUInVedPEGLeTCDlLvlemYUR+I/lqimLZIlNlctQz63CqJ1IK0UN Ziqo/l3n1arKEABs44mdCjIHmf4uJOSy/1HxkeWWJYJbf2X4Do4+zuFW1r96TlSNZ2BU3q z7wB7tGBn6joqf/z/rmQJ+Q0JMRn8rC9DBUs5jumuhCxi9viNpLz9z6PYFLy2vTzFfipP8 67JfxQ0WixgbbpGlOw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 45bdb95e (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Sun, 24 Jul 2022 14:14:13 +0000 (UTC) Date: Sun, 24 Jul 2022 14:14:15 +0000 From: Tobias Geerinckx-Rice To: Maya , "guix-devel@gnu.org" Subject: Re: User group during build process In-Reply-To: References: Message-ID: <3216B1FC-8597-4D68-B4C0-BD5F67E86F53@tobias.gr> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Autocrypt: addr=me@tobias.gr; keydata= mQINBFVks2ABEACjGBPhWf/qx0L9OhEIrAFTimo5dHa1FLy0AHaHvxmwYSIdJmERYGiNle1rcOvw cFRtu8KJUsrs27Vgoso3qHJpghVitUUf0v3ZuXQT9kfuQLz1Y8pyMzHwVFMLiJVj4Z3y7CJk+xyZ cpSAMbyPINbFVEhsK+z+8ojVGuaiucZkib6b67ySG6Pp1bon8xVvosj71ZRjfXh1t4X8laWO7fQq itT9lmc6DxbE/4vIhR+Vb2MblaA+DyHoNHGGao89h4CO99lfzWzsux41DnEG9d317sJRQTig6Wja EKHXZRA9FbfogD4SDa2uQYCpTJpsVjAyZyu2fuJ+t0zJJ+Ai9qDY87P6hOyd+/n8Eh2Y4TbxJiDo XUT72XY/RfPH1qrMIP3EI/NNL4LQeGG1n+625k3OVWcRVXG2vRrB6qurLmGkLEmjXWCFD9cCRGfH LeajLm9sM+t/nZPZ3btetcmK9tM2EwivyLUNhrTk73UUnI4CSAzdO2cISqo9zSMtFgj2alqd2fOR s7CKfEn+5PquruDbp/Ej7dOOrjgWSCXLDDYXRrtaKrLz/dhqq5ftFYi9tUTTQecFotM08fPtu+Kw JMP2ySHCkUqp0GvrUCeSRPAJZsmJrd535y+LlRhnqb0mbG4dgMa8A6xhkFYugnqldy/q7kX1EmRI 686N7bA6fh1MCQARAQABtCRUb2JpYXMgR2VlcmluY2t4LVJpY2UgPG1lQHRvYmlhcy5ncj6JAlIE EwEKADwCHgECF4ACGQECGwMWIQT1vFU0w28Ah7OdNu8cncT+udt8SwUCXpe0rAYLCQgHCgQFFQoJ CAsFFgMCAQAACgkQHJ3E/rnbfEu5IhAAk+0BW/twLmx1xMmeXn+I7Ne6SG3++0TRBduEaGWV3n59 lX6XPZUQdAPpS4uy0H+c90Owkw+aWUEwfyOWphrxZRtR2cCOP/3Pxj3Vgtz5RkY4u27lMj15jqa/ p7l2l256ZKJOegr9TvOWtkhMp5lxeVHT6f/44Kv/r/8mMCgSnLXYrEWPE462xI+mIJOanHLJb6No f2xLRCvXoLLp7Yejjv1dwOO71R9PMRhtNy46pZM1ylQ++UTkeSocJw4aNtiu0DHOkX9AlNBkutIx x07RpO+MqJKlzzLeQiC/fE5+dR2itRONopwXAqN3MuT7MonQo5XifBn+VK8i9xZWTXZDkWItWtCC 8oIj4zwxwFWiTmMwwSbI3Wdd/11Zw3CLc4Gd0M6NVgvAnuErQXSgr4lrWhZcncvi4L6EJTc9AUSa 8UWPF+S9t+CHTukpJmcYnsccMkOBhT7OZlmWBsylrYK/JTRWqgWSHWdSKmOuLK+MGDneOZEHkEcf jeXRWvmG7MSU5tE/p7NDLIg9vkvhQV9b0q4OtY65uNWbRe2QRJaYMDcYUAeSZzivRa8VaoVen6tb FvH44zpCxubn23ABl9YIzwvJC++r+H2qLdLpy0cfITiZadZ74Ae0aosNw7XARS6OY+A03BfXyPiI 2oW0jf/PdH9sh2mQrQxIQJ5cZz6Z3X0= Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1658672076; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature:autocrypt:autocrypt; bh=1P09HhfIgeOUn8qj7A4vEu2ekKKyPVeYHWz9QdY/GF4=; b=dbD48Dsgqq/Y7lAyNumqCqzUK+uHRp7ClcCWSDJBHO02boksQpFu+UWdq9EJW3HkwCPmkE oH+9MLfafzV3138pG80HED+Y3fHoIR5mdjBE76GD6QpfkyP8pnkJaHOCIMTFiJL42m+8+n vQtGkZlgGvRKSKXVfnHC31x8SYhD9eiZxmzdsfSmhXPSw+PYIZwjxGTgvgD5e/2Zru8WH2 uJXrH1oPruMN7POWXD3D/T/WlvKEaAS3GPth7mvQQT2bttNbb3UkNyCo/qh7pA8uGWoVHY ZXhPciUjYAZU3Whi5GwyyFr82cdijqIAF14Sf73bVCoveduVCYREvb+AX7xJEg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1658672076; a=rsa-sha256; cv=none; b=DDTYG6nAV1RcrqnEVxwliz1VJSxlxRPwsgQw/fUZrdHyD7UHAbFYXc2dEWdVOlwGYPKWG8 03iw4ftAuBZwcSYGCK+zokyPDn+2qoVvv7A3LC/jZlz4gkwkW/aJGAyV9eeMyFseelTBDv UMc46lWJ4a8Li+kMSFb25akaZ/zwAaocXzCtzHNI7VftXfUiCHSt8kCQg0R9aCBf3MVfq2 NB6UCiOx+T7tcDFbjyeuvl3oYFpJaWbwQxHgi1nKnd0q4/V7O05ioiAqjcHwsdbrWzsXkU PAizsRQef5wbflgLVQ+W5NIPGW15nvsWEDCx3PYgNWdTebYHdmVLO2V8UXhDdg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=D9sd8kU8; dmarc=pass (policy=reject) header.from=tobias.gr; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.93 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=D9sd8kU8; dmarc=pass (policy=reject) header.from=tobias.gr; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 04A84DB76 X-Spam-Score: -3.93 X-Migadu-Scanner: scn1.migadu.com X-TUID: vl/H0qbaYlDZ Hi Maya! So=2E=2E=2E You cannot change group ownership in the store=2E There are n= o additional user groups in the build environment=2E The chgrp failing is = by design ('it's a feature, not a bug'), and there's no way to subvert this= =2E The group is not required during the build process=2E The correct way to make smtpctl setgid is to use Guix System's setuid-prog= rams field, and use (setgid? #t) (group "smtpq") for smtpctl=2E Kind regards, T G-R Sent on the go=2E Excuse or enjoy my brevity=2E