* Bug?: manpages are only readable by root when doing sudo make install with umask 077
@ 2018-01-10 15:38 Antoine Amarilli
2018-01-10 16:23 ` Daniel Kahn Gillmor
0 siblings, 1 reply; 10+ messages in thread
From: Antoine Amarilli @ 2018-01-10 15:38 UTC (permalink / raw)
To: notmuch
[-- Attachment #1: Type: text/plain, Size: 577 bytes --]
Hi all,
My user has umask 077. When I do sudo make install, this umask seems to
affect installation: the folders /usr/local/share/man/man* get created
as belonging to root:staff with permissions 2700, so the installed
manpages cannot be read by anyone except root. With the default umask of
002, however, the folders are correctly created with permissions 2755.
It doesn't make sense to install manpages that only root can read, so
wouldn't it be better if the Makefile somehow used a different umask
when installing man pages?
Best,
--
Antoine Amarilli
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 15:38 Bug?: manpages are only readable by root when doing sudo make install with umask 077 Antoine Amarilli
@ 2018-01-10 16:23 ` Daniel Kahn Gillmor
2018-01-10 18:29 ` Antoine Amarilli
0 siblings, 1 reply; 10+ messages in thread
From: Daniel Kahn Gillmor @ 2018-01-10 16:23 UTC (permalink / raw)
To: Antoine Amarilli, notmuch
[-- Attachment #1: Type: text/plain, Size: 1021 bytes --]
On Wed 2018-01-10 16:38:14 +0100, Antoine Amarilli wrote:
> My user has umask 077. When I do sudo make install, this umask seems to
> affect installation: the folders /usr/local/share/man/man* get created
> as belonging to root:staff with permissions 2700, so the installed
> manpages cannot be read by anyone except root. With the default umask of
> 002, however, the folders are correctly created with permissions 2755.
>
> It doesn't make sense to install manpages that only root can read, so
> wouldn't it be better if the Makefile somehow used a different umask
> when installing man pages?
how is the installation happening for you? In Makefile.local, i see:
install -m0644 $(filter %.1.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man1
install -m0644 $(filter %.5.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man5
install -m0644 $(filter %.7.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man7
which suggests that the -m would override the umask.
is your installation doing something different somehow?
--dkg
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 16:23 ` Daniel Kahn Gillmor
@ 2018-01-10 18:29 ` Antoine Amarilli
2018-01-10 19:45 ` Tomi Ollila
2018-01-10 20:40 ` Daniel Kahn Gillmor
0 siblings, 2 replies; 10+ messages in thread
From: Antoine Amarilli @ 2018-01-10 18:29 UTC (permalink / raw)
To: notmuch
[-- Attachment #1: Type: text/plain, Size: 1149 bytes --]
Hi Daniel,
Thanks for your reply!
On Wed, Jan 10, 2018 at 11:23:03AM -0500, Daniel Kahn Gillmor wrote:
> On Wed 2018-01-10 16:38:14 +0100, Antoine Amarilli wrote:
> how is the installation happening for you? In Makefile.local, i see:
>
> install -m0644 $(filter %.1.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man1
> install -m0644 $(filter %.5.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man5
> install -m0644 $(filter %.7.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man7
>
> which suggests that the -m would override the umask.
That's right. Looking more closely I think the issue is only with the
permissions of the directories /usr/local/share/man/man*, not the files
that they contain. Of course this is still an obstacle for the manpages
to be readable. So I guess the following in doc/Makefile.local (just
above what you quoted):
mkdir -p "$(DESTDIR)$(mandir)/man1"
mkdir -p "$(DESTDIR)$(mandir)/man5"
mkdir -p "$(DESTDIR)$(mandir)/man7"
does not override the umask. I suspect that the parameter -m0644 should
be passed to these invocations too.
Best,
--
Antoine Amarilli
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 18:29 ` Antoine Amarilli
@ 2018-01-10 19:45 ` Tomi Ollila
2018-01-10 20:41 ` Daniel Kahn Gillmor
2018-01-10 20:40 ` Daniel Kahn Gillmor
1 sibling, 1 reply; 10+ messages in thread
From: Tomi Ollila @ 2018-01-10 19:45 UTC (permalink / raw)
To: Antoine Amarilli, notmuch
On Wed, Jan 10 2018, Antoine Amarilli wrote:
> Hi Daniel,
>
> Thanks for your reply!
>
> On Wed, Jan 10, 2018 at 11:23:03AM -0500, Daniel Kahn Gillmor wrote:
>> On Wed 2018-01-10 16:38:14 +0100, Antoine Amarilli wrote:
>> how is the installation happening for you? In Makefile.local, i see:
>>
>> install -m0644 $(filter %.1.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man1
>> install -m0644 $(filter %.5.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man5
>> install -m0644 $(filter %.7.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man7
>>
>> which suggests that the -m would override the umask.
>
> That's right. Looking more closely I think the issue is only with the
> permissions of the directories /usr/local/share/man/man*, not the files
> that they contain. Of course this is still an obstacle for the manpages
> to be readable. So I guess the following in doc/Makefile.local (just
> above what you quoted):
>
> mkdir -p "$(DESTDIR)$(mandir)/man1"
> mkdir -p "$(DESTDIR)$(mandir)/man5"
> mkdir -p "$(DESTDIR)$(mandir)/man7"
>
> does not override the umask. I suspect that the parameter -m0644 should
> be passed to these invocations too.
If user has set umask to 077, should we override that (as we're now doing
with the files by giving explicit permissions) ?
>
> Best,
>
> --
> Antoine Amarilli
>
> _______________________________________________
> notmuch mailing list
> notmuch@notmuchmail.org
> https://notmuchmail.org/mailman/listinfo/notmuch
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 19:45 ` Tomi Ollila
@ 2018-01-10 20:41 ` Daniel Kahn Gillmor
0 siblings, 0 replies; 10+ messages in thread
From: Daniel Kahn Gillmor @ 2018-01-10 20:41 UTC (permalink / raw)
To: Tomi Ollila, Antoine Amarilli, notmuch
On Wed 2018-01-10 21:45:34 +0200, Tomi Ollila wrote:
> If user has set umask to 077, should we override that (as we're now doing
> with the files by giving explicit permissions) ?
/usr/bin/install itself does already override the user's umask, and it's
being run by the superuser ("sudo make install") who might not have the
same umask. I think this is the right thing to do if we want the
installation to actually work for people.
fixing the mkdir invocations just brings them in line with the logic of
the /usr/bin/install invocations.
--dkg
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 18:29 ` Antoine Amarilli
2018-01-10 19:45 ` Tomi Ollila
@ 2018-01-10 20:40 ` Daniel Kahn Gillmor
2018-01-31 20:31 ` Antoine Amarilli
1 sibling, 1 reply; 10+ messages in thread
From: Daniel Kahn Gillmor @ 2018-01-10 20:40 UTC (permalink / raw)
To: Antoine Amarilli, notmuch
Hi Antoine--
On Wed 2018-01-10 19:29:59 +0100, Antoine Amarilli wrote:
> On Wed, Jan 10, 2018 at 11:23:03AM -0500, Daniel Kahn Gillmor wrote:
> That's right. Looking more closely I think the issue is only with the
> permissions of the directories /usr/local/share/man/man*, not the files
> that they contain. Of course this is still an obstacle for the manpages
> to be readable. So I guess the following in doc/Makefile.local (just
> above what you quoted):
>
> mkdir -p "$(DESTDIR)$(mandir)/man1"
> mkdir -p "$(DESTDIR)$(mandir)/man5"
> mkdir -p "$(DESTDIR)$(mandir)/man7"
>
> does not override the umask. I suspect that the parameter -m0644 should
> be passed to these invocations too.
That sounds about right, though i think you want -m0755, since the
directories need the executable bit set to be traversable.
Would you try this out (probably have to remove the existing directories
first to test it, assuming that there's nothing there from anything
other than notmuch), and then send a patch directly to the mailing list?
thanks for your attention to detail here, it's the best way to make
things work for everyone in the future :)
--dkg
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: Bug?: manpages are only readable by root when doing sudo make install with umask 077
2018-01-10 20:40 ` Daniel Kahn Gillmor
@ 2018-01-31 20:31 ` Antoine Amarilli
2018-01-31 20:50 ` [PATCH] doc: create manpage folders with right permissions Antoine Amarilli
0 siblings, 1 reply; 10+ messages in thread
From: Antoine Amarilli @ 2018-01-31 20:31 UTC (permalink / raw)
To: Daniel Kahn Gillmor; +Cc: notmuch
[-- Attachment #1: Type: text/plain, Size: 1389 bytes --]
Hi Daniel,
Thanks for your answer, and sorry for the ridiculous delay.
On Wed, Jan 10, 2018 at 03:40:13PM -0500, Daniel Kahn Gillmor wrote:
> On Wed 2018-01-10 19:29:59 +0100, Antoine Amarilli wrote:
> > On Wed, Jan 10, 2018 at 11:23:03AM -0500, Daniel Kahn Gillmor wrote:
> > That's right. Looking more closely I think the issue is only with the
> > permissions of the directories /usr/local/share/man/man*, not the files
> > that they contain. Of course this is still an obstacle for the manpages
> > to be readable. So I guess the following in doc/Makefile.local (just
> > above what you quoted):
> >
> > mkdir -p "$(DESTDIR)$(mandir)/man1"
> > mkdir -p "$(DESTDIR)$(mandir)/man5"
> > mkdir -p "$(DESTDIR)$(mandir)/man7"
> >
> > does not override the umask. I suspect that the parameter -m0644 should
> > be passed to these invocations too.
>
> That sounds about right, though i think you want -m0755, since the
> directories need the executable bit set to be traversable.
Correct, thanks for pointing this out!
> Would you try this out (probably have to remove the existing directories
> first to test it, assuming that there's nothing there from anything
> other than notmuch),
Yup, it works.
> and then send a patch directly to the mailing list?
Doing this in a separate email.
Best,
--
Antoine Amarilli
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread
* [PATCH] doc: create manpage folders with right permissions
2018-01-31 20:31 ` Antoine Amarilli
@ 2018-01-31 20:50 ` Antoine Amarilli
2018-01-31 20:56 ` Daniel Kahn Gillmor
2018-02-01 11:22 ` David Bremner
0 siblings, 2 replies; 10+ messages in thread
From: Antoine Amarilli @ 2018-01-31 20:50 UTC (permalink / raw)
To: notmuch
Avoids the issue where umask can make man pages unreadable after
installation. Relevant email on the mailing-list:
<87h8rt30sy.fsf@fifthhorseman.net>
---
doc/Makefile.local | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/doc/Makefile.local b/doc/Makefile.local
index c6f05ca8..a1739e15 100644
--- a/doc/Makefile.local
+++ b/doc/Makefile.local
@@ -89,9 +89,9 @@ install-man:
else
build-man: ${MAN_GZIP_FILES}
install-man: ${MAN_GZIP_FILES}
- mkdir -p "$(DESTDIR)$(mandir)/man1"
- mkdir -p "$(DESTDIR)$(mandir)/man5"
- mkdir -p "$(DESTDIR)$(mandir)/man7"
+ mkdir -m0755 -p "$(DESTDIR)$(mandir)/man1"
+ mkdir -m0755 -p "$(DESTDIR)$(mandir)/man5"
+ mkdir -m0755 -p "$(DESTDIR)$(mandir)/man7"
install -m0644 $(filter %.1.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man1
install -m0644 $(filter %.5.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man5
install -m0644 $(filter %.7.gz,$(MAN_GZIP_FILES)) $(DESTDIR)/$(mandir)/man7
--
2.15.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
end of thread, other threads:[~2018-02-01 11:22 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-01-10 15:38 Bug?: manpages are only readable by root when doing sudo make install with umask 077 Antoine Amarilli
2018-01-10 16:23 ` Daniel Kahn Gillmor
2018-01-10 18:29 ` Antoine Amarilli
2018-01-10 19:45 ` Tomi Ollila
2018-01-10 20:41 ` Daniel Kahn Gillmor
2018-01-10 20:40 ` Daniel Kahn Gillmor
2018-01-31 20:31 ` Antoine Amarilli
2018-01-31 20:50 ` [PATCH] doc: create manpage folders with right permissions Antoine Amarilli
2018-01-31 20:56 ` Daniel Kahn Gillmor
2018-02-01 11:22 ` David Bremner
Code repositories for project(s) associated with this public inbox
https://yhetil.org/notmuch.git/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).