Source: igtf-policy-bundle
Version: 1.84-1
Severity: normal

Hi.

I think, from a conceptual PoV the package should create relative symlinks for
the symbolic links named by the hash value, i.e. the files like:
lrwxrwxrwx 1 root root  50 Jul 18 14:51 7ecb2657.namespaces -> 
/usr/share/igtf-policy/classic/7ecb2657.namespaces
lrwxrwxrwx 1 root root  41 Jul 18 14:51 7ecb2657.0 -> 
/usr/share/igtf-policy/classic/7ecb2657.0
lrwxrwxrwx 1 root root  54 Jul 18 14:51 7ecb2657.signing_policy -> 
/usr/share/igtf-policy/classic/7ecb2657.signing_policy
lrwxrwxrwx 1 root root  50 Jul 18 14:51 dd4b34ea.namespaces -> 
/usr/share/igtf-policy/classic/dd4b34ea.namespaces
lrwxrwxrwx 1 root root  41 Jul 18 14:51 dd4b34ea.0 -> 
/usr/share/igtf-policy/classic/dd4b34ea.0
lrwxrwxrwx 1 root root  54 Jul 18 14:51 dd4b34ea.signing_policy -> 
/usr/share/igtf-policy/classic/dd4b34ea.signing_policy

which is also what the upstream package does as well as ca-certificates does.


Consider the following:
The files in /etc/grid-security/certificates/ are per se configuration files.
It just happens, that for simplicity, the canonical files, i.e.:
lrwxrwxrwx 1 root root  46 Jul 18 14:51 GermanGrid.info -> 
/usr/share/igtf-policy/classic/GermanGrid.info
lrwxrwxrwx 1 root root  52 Jul 18 14:51 GermanGrid.namespaces -> 
/usr/share/igtf-policy/classic/GermanGrid.namespaces
lrwxrwxrwx 1 root root  45 Jul 18 14:51 GermanGrid.pem -> 
/usr/share/igtf-policy/classic/GermanGrid.pem
lrwxrwxrwx 1 root root  49 Jul 18 14:51 GermanGrid.crl_url -> 
/usr/share/igtf-policy/classic/GermanGrid.crl_url
lrwxrwxrwx 1 root root  56 Jul 18 14:51 GermanGrid.signing_policy -> 
/usr/share/igtf-policy/classic/GermanGrid.signing_policy
are symlinks to /usr/...

Now when I e.g. manually replace a file of these, one should expect that this
takes effect, however, the 7ecb2657.* and dd4b34ea.* file still point to the 
/usr/...

If they'd point to the files in the same dir, it would work better in such 
case, that is:
lrwxrwxrwx 1 root root   14 Feb  8 16:28 7ecb2657.0 -> GermanGrid.pem
lrwxrwxrwx 1 root root   21 Feb  8 16:28 7ecb2657.namespaces -> 
GermanGrid.namespaces
lrwxrwxrwx 1 root root   25 Feb  8 16:28 7ecb2657.signing_policy -> 
GermanGrid.signing_policy
lrwxrwxrwx 1 root root   14 Feb  8 16:28 dd4b34ea.0 -> GermanGrid.pem
lrwxrwxrwx 1 root root   21 Feb  8 16:28 dd4b34ea.namespaces -> 
GermanGrid.namespaces
lrwxrwxrwx 1 root root   25 Feb  8 16:28 dd4b34ea.signing_policy -> 
GermanGrid.signing_policy


Cheers,
Chris.

Reply via email to