Received: from mail-lj1-f178.google.com (mail-lj1-f178.google.com [209.85.208.178]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 732AB781F03; Sat, 31 Oct 2020 18:30:30 +0000 (UTC) Received: by mail-lj1-f178.google.com with SMTP id o13so2199705ljj.11; Sat, 31 Oct 2020 11:30:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6pObhTIEWriMtOAEcwHb6/DwA5Hnb/9KxbZzRbiAtBk=; b=AF+h9/6hNt8vSQZ5sm5nAU+i79dEzzMgvjBUZ2LTGhM/ZRaXiEAulAaW8i+Co+5t28 NfP9cVCUdrfy6eLi3WlUmVivPMDTm0M2be4y/dPI6xnv1bDNIu6p+9kQ9dhPid4T3Ufk 81EwESltsfe+ByUBR1fb4n+p9x903VUCWdl3frWMLPVxn2SYEF7zcEQQM9uLs+nsFrcu sAFvcU3p6uvldy3G2cXdr0qZwHnhLwiX3knyuHWPsA5v/lnZv+TRJHr+8RnIoXCGwelM 4bf7O6WmuGGZarymSmfI0Nqpf/lko2oU+Fppa4r85vW1rvdpRETKUWbY1WEy1j99lveh d1SA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6pObhTIEWriMtOAEcwHb6/DwA5Hnb/9KxbZzRbiAtBk=; b=GFKw1D611vpbLKuGwlifNH2yjOZVSuXIglX/E812os6xGw23ZHLMta2dHPKyDS+Jv6 FRzo849z/1jgbCZqmGsJInQ+UfFsodCglt7R8K3Cn3z6AYx7PPrNwtAf8XVtj3A2rlDs AS19rvy71V+YPowJ18CEgdfVvcVI4OMhmf5E8+D+SL+PPlYex+Sv4vNUMNKf20tWgJZu YlDmXTbjZzRF9SYcQ4pI8RNYXPiuIgYWs9FVxPedypsgx5uzIorvAxj+83/8XC2XP36i j1GODKOOHgPauPVdNVfRTQdimCrfCvFJULuv7GznZmPTatVxpQES2s/6EyLyp0WD+DKF o9tw== X-Gm-Message-State: AOAM5316iKEnjEycQjS7QQaiGSzlneG9ZfGfX3SD5Bn0jhsSTWB5E/Gs j+et/zfwc53T3iFKo1nsyyw/4/uMyVS+91vXd1I= X-Google-Smtp-Source: ABdhPJzCEFB3LCYgjRXmSZvv53Ekt3V5360S0SQ1D+2ugdybPQwv9OUi99S+oYZeRafhTl89D38dhkxHGswlLs7kscQ= X-Received: by 2002:a2e:9c94:: with SMTP id x20mr3217777lji.33.1604169029102; Sat, 31 Oct 2020 11:30:29 -0700 (PDT) MIME-Version: 1.0 References: <2742243.5cedR3tnqV@nanabozho> In-Reply-To: <2742243.5cedR3tnqV@nanabozho> From: PICCORO McKAY Lenz Date: Sat, 31 Oct 2020 14:30:18 -0400 Message-ID: Subject: Re: why the wiki page promotes usage of sudo and also use grups To: Ariadne Conill Cc: alpine-user , ~alpine/users@lists.alpinelinux.org Content-Type: multipart/alternative; boundary="00000000000023b0ed05b2fbb51f" --00000000000023b0ed05b2fbb51f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Ok, thanks for the clarification. so that wiki page are super-ou-of-date puff so much work to do in the wiki of alpine.. thanks ! Lenz McKAY Gerardo (PICCORO) http://qgqlochekone.blogspot.com El s=C3=A1b., 31 de oct. de 2020 a la(s) 10:35, Ariadne Conill ( ariadne@dereferenced.org) escribi=C3=B3: > Hello, > > On Saturday, October 31, 2020 7:43:33 AM MDT PICCORO McKAY Lenz wrote: > > in the wiki page > > https://wiki.alpinelinux.org/wiki/Creating_an_Alpine_package > > it said that use that "thing" of sudo.. so why the complication about > > groups? > > Groups and package users have to be created in the build environment in > order > to ensure that the generated package has correct UIDs and GIDs when > installed > on the target. This is because apk-tools needs to know which files will > belong > to the new user/group. > > > so this is official or is forced to? I mean can we avoid.. cos i try to > > package GAMBAS and seems this is irresponsible to promote a thing that > is a > > crap in security! > > > > sudo is a horrible creature that makes the groups means nothing.. > > abuild has not used sudo for a very long time. > > Ariadne > > > > --00000000000023b0ed05b2fbb51f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Ok, thanks for the clarification.=C2=A0 so that wiki page = are super-ou-of-date puff so much work to do in the wiki of alpine.. thanks= !

Lenz McKAY Gerardo= (PICCORO)


El s=C3=A1b., 31 de oct. de 2020 a la(s) 10:3= 5, Ariadne Conill (ariadne@dere= ferenced.org) escribi=C3=B3:
Hello,

On Saturday, October 31, 2020 7:43:33 AM MDT PICCORO McKAY Lenz wrote:
> in the wiki page
> https://wiki.alpinelinux.org/wiki/C= reating_an_Alpine_package
> it said that use that "thing" of sudo.. so why the complicat= ion about
> groups?

Groups and package users have to be created in the build environment in ord= er
to ensure that the generated package has correct UIDs and GIDs when install= ed
on the target.=C2=A0 This is because apk-tools needs to know which files wi= ll belong
to the new user/group.

> so this is official or is forced to? I mean can we avoid.. cos i try t= o
> package GAMBAS and seems this is irresponsible to promote a thing that= is a
> crap in security!
>
> sudo is a horrible creature that makes the groups means nothing..

abuild has not used sudo for a very long time.

Ariadne



--00000000000023b0ed05b2fbb51f--