Hello Manoj. I'd like to hear your opinion on this as kernel-package maintainer.
On one hand, /usr/src has been sgid-src for ages, so make-kpkg should probably deal with that gracefully. On the other hand, I don't really see the point in having /usr/src sgid-src by default. While we are at it, I wonder how is this different from /usr/local and the group staff. The only difference I see is that /usr/local is in policy while /usr/src is not. Thanks. ---------- Forwarded message ---------- From: "Andreas [UTF-8] Krüger" <andreas.krue...@famsik.de> To: sub...@bugs.debian.org Date: Sat, 13 Mar 2010 10:18:00 +0100 Subject: Bug#573701: base-files: /usr/src permissions causes make-kpkg failure "control directory has bad permissions 2755" Package: base-files Version: 5.1 Severity: normal To help investigate bug 571457, I wanted to compile an openvz upstream kernel obtained by cd /usr/src git clone git://git.openvz.org/pub/linux-2.6.26-openvz openvz-git-kernel For the actual kernel compile, I configured and then tried the Debian way: cd /usr/src/openvz-git-kernel make-kpkg --initrd kernel_image Expected result: A linux-image .deb package gets built. Result seen: The build fails, with an error message dpkg-deb: control directory has bad permissions 2755 (must be >=0755 and <=0775) My analysis: base-files sets up /usr/src with the g+s permission bit, that bit infects my entire source directory tree, make-kpkg doesn't like that. My take on this: Various Debian packages should fit together, but base-files and make-kpkg don't, in this respect. My own suggestion towards how to achieve cooperation: Drop the g+s bit from /usr/src. My workaround does exactly that: chroot -R g-s . Final "pea-counting" remarks on the precise package version: The build actually failed on a Lenny system with base-files version 5lenny5. I verified that it is the base-files package that sets up the g+s permission, via rm -rf /usr/src aptitude reinstall base-files ls -l /usr But I did this verification on a different system (in fact, an openvz guest of the Lenny system host) which has "testing" installed. I didn't bother to retry the entire kernel compilation on that "testing" system. (I would be willing to do that if people think it's worth the effort.) Regards, and thank you for providing fine software, Andreas [...] -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org