[Rpm-maint] [rpm-software-management/rpm] Use the real user/group name in BUILDROOT if we set %attr(-, -, -) explicitly (Issue #1933)

[Panu Matilainen]

The -,- syntax for user and group is a leftover from very, very old days before BuildRoot: was even invented. Fast forward a decade where BuildRoot was made mandatory, and that's 15 years ago already. Nobody should be running rpmbuild as root, and we do NOT want to encourage that by any means whatsoever.

So we don't want rpm to pick the user or group from disk, *ever*. There are at least the following to do in this:

[ ] ensure on-disk group/user is never used
[ ] update documentation to explain that for user/group, '-' in just falls back to defattr (which by default means root,root)
[ ] issue warning/error on the reduntant forms like %attr(-,-,-) becuase it just doesn't mean anything

As for rpmrebuild, it's a highly useful thing for some desperate cases but it'll be better off listing the %attr() specifically for each file.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1933#issuecomment-1404904585
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/1933/1404904585 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230126/705ff902/attachment-0001.html>