> The spec file is not gone, but merely moved to another repository:
OK, thanks.

I still have two questions, one about differences between the official DEB and 
RPM packagin and one regarding the rationale of file permissions in general.

Differences between RPM and DEB packaging:
-- /etc/icinga2 is root-owned on RPM, icinga-owned on DEB
-- files/dirs inside /etc/icinga2 are 640/750 on RPM, 644/755 on DEB
-- /var/log/icinga2 and subdirs are set-gid on DEB, not on RPM
-- additionally, /var/log/icinga2/compat/archives is 2755 on DEB (0750 on RPM)
-- /var/cache/icinga2's group is www-data on DEB, icingacmd on RPM
-- /etc(icinga2/pki is 700 on DEB, I don't see anything equivalent for RPM
-- likewise, /var/lib/icinga2 and its subdirs are 0750 on DEB, I don't see 
anything similar for RPM
Probably I'm missing something.

Rationale of file permissions:
What's the rationale behind the restriction of config/log files, especially for 
the directories being non-world-searchable? 
What kind of sensitive information could the logs disclose?
Isn't one of the ideas of constants.conf to put all the secret values in there 
and out of the other conf.d files?
_______________________________________________
icinga-users mailing list
icinga-users@lists.icinga.org
https://lists.icinga.org/mailman/listinfo/icinga-users

Reply via email to