From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1GZ5Ao-0006z9-Kg for garchives@archives.gentoo.org; Sun, 15 Oct 2006 12:32:59 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.6) with SMTP id k9FCURgO031027; Sun, 15 Oct 2006 12:30:27 GMT Received: from desiato.digimed.co.uk (82-69-83-178.dsl.in-addr.zen.co.uk [82.69.83.178]) by robin.gentoo.org (8.13.8/8.13.6) with ESMTP id k9FCRwif002663 for ; Sun, 15 Oct 2006 12:27:58 GMT Received: from krikkit.digimed.co.uk (krikkit.digimed.co.uk [192.168.1.3]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by desiato.digimed.co.uk (Postfix) with ESMTP id 5AE3D77F66 for ; Sun, 15 Oct 2006 13:27:58 +0100 (BST) Date: Sun, 15 Oct 2006 13:27:57 +0100 From: Neil Bothwick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Is it possible to protect *INDIVIDUAL FILES* against etc-update? Message-ID: <20061015132757.283f8283@krikkit.digimed.co.uk> In-Reply-To: <20061015044052.GB9122@waltdnes.org> References: <200610121910.19727.alan@linuxholdings.co.za> <20061013152204.77228.qmail@web31708.mail.mud.yahoo.com> <20061013163319.1c9d72c6@hactar.digimed.co.uk> <20061015044052.GB9122@waltdnes.org> Organization: Digital Media Production X-Mailer: Sylpheed-Claws 2.5.5 (GTK+ 2.10.6; powerpc-unknown-linux-gnu) X-GPG-Fingerprint: 7260 0F33 97EC 2F1E 7667 FE37 BA6E 1A97 4375 1903 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_P2+w85Hiu/gg6OIFBd3=HrM"; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Archives-Salt: e40b58c5-355b-44cc-9abe-87527d17889d X-Archives-Hash: b37cec2bd60b83c6e017ebe0bc098563 --Sig_P2+w85Hiu/gg6OIFBd3=HrM Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sun, 15 Oct 2006 00:40:52 -0400, Walter Dnes wrote: > > Yes, etc-update shows it to your before asking what to do. Check the > > contents of each file before allowing it to be overwritten, and never, > > ever let etc-update overwrite etc/fstab, /etc/passwd or /etc/group. =20 >=20 > CONFIG_PROTECT and CONFIG_PROTECT_MASK work at the *DIRECTORY* level. That will change soon IIRC. > What I really want/need is a feature that allows additional protection > *FOR INDIVIDUAL FILES*. E.g... You don't understand what CONFIG_PROTECT means, it prevents files being automatically overwritten during installation, leaving them to you to update. > - my customized /etc/conf.d/local.start or /etc/conf.d/local.stop > should *NEVER* be replaced with an empty version Agreed. =20 > - /etc/rc.conf should be left alone too. ***FOR THE UMPTEENTH TIME, > NO I DO NOT WANT NANO REPLACING VIM AS MY "EDITOR"*** How would you know about changes to rc.conf? Either new features or changes= in the way things are done would pass you by. > And the list goes on and on. Howsabout an environmental variable > CONFIG_PROTECT_FILES, containing a list of protected files? I'm ready > to submit a feature request if necessary. Does anybody have additional > comments? As I've mentioned several times before, there was a patch to dispatch-conf to do just this. You added the files you didn't want touching, ever, to a line in the config file. Unfortunately, the patch hasn't been updated for a couple of years and stopped working a while ago. Why not re-open the bug at http://bugs.gentoo.org/show_bug.cgi?id=3D68618 --=20 Neil Bothwick If you think that you can truncate my sig to 75 chars, then you can just fu --Sig_P2+w85Hiu/gg6OIFBd3=HrM Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFMilNum4al0N1GQMRAoYXAJ4/BAaQOBTcEvX6Y5aPPdJxQB4p3QCfSeSd xffeT8su6zGS6xq+1h2NLRQ= =7Z4E -----END PGP SIGNATURE----- --Sig_P2+w85Hiu/gg6OIFBd3=HrM-- -- gentoo-user@gentoo.org mailing list