You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Benjamin Bentmann <be...@udo.edu> on 2009/08/17 14:27:49 UTC
Group ownership for files on p.a.o
Hi,
Vincent notified me that many of the site files I recently deployed via
"mvn site-deploy" (using Maven 2.2.1) ended up with the wrong security
settings: While the files are group-writable, the group is "bentmann"
and not "maven".
I had a quick chat with someone over at #asfinfra and they explained me
that the group for a file is derived from the user's primary group. My
primary group is and so I was told was "bentmann".
The issue is not limited to my account. Looking at
/www/maven.apache.org/plugins/maven-pdf-plugin-1.1-SNAPSHOT/index.html
or
/www/maven.apache.org/linkcheck.html
I see that at least Vincent and John produced similar files where the
group equals the user.
Is anybody aware of changes in our tooling that could cause this? Infra
said we would have to do "chmod" and "chgrp", was that ever the case and
changed recently?
Benjamin
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Vincent Siveton <vi...@gmail.com>.
Hi Wendy
2009/8/17 Wendy Smoak <ws...@gmail.com>:
> Nothing changed that I know of... it's always been like this, and you
> have to go change the permissions on new files that you deploy. If
> you can't find the person who owns them, you can usually delete and
> re-deploy them.
FYI I deployed [1] for the first time this morning using scp and after
I called chmod as usual. We have:
drwxrwxr-x 10 vsiveton vsiveton 38 Aug 17 11:08
maven-pdf-plugin-1.1-SNAPSHOT
HTH
Vincent
[1] http://maven.apache.org/plugins/maven-pdf-plugin-1.1-SNAPSHOT
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Benjamin Bentmann <be...@udo.edu>.
Brett Porter wrote:
> Maybe it used to have the setgid bit set on the directory?
From some docs I found on this bit that looks pretty much like the
thing we want so I asked infra to put in on/back:
https://issues.apache.org/jira/browse/INFRA-2189
Benjamin
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Brett Porter <br...@apache.org>.
On 17/08/2009, at 7:37 PM, Barrie Treloar wrote:
> I thought you could specify the group in
> settings.xml/settings/servers/username as
> user,group
> e.g. bentmann,maven
> which would override the primary group and use the specified group (as
> long as you belong to this group)
>
> I'd have to check my local settings at home to confirm this.
>
> It is not documented on
> http://maven.apache.org/developers/committer-settings.html
That's correct, though I've never had to use it in the past (and I'm
not sure it would get used for the site, due to the unzip process).
- Brett
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Barrie Treloar <ba...@gmail.com>.
I thought you could specify the group in
settings.xml/settings/servers/username as
user,group
e.g. bentmann,maven
which would override the primary group and use the specified group (as
long as you belong to this group)
I'd have to check my local settings at home to confirm this.
It is not documented on
http://maven.apache.org/developers/committer-settings.html
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Brett Porter <br...@apache.org>.
Maybe it used to have the setgid bit set on the directory?
It should be possible to add server configuration to do a chgrp after
site deploy though.
On 17/08/2009, at 9:43 AM, Benjamin Bentmann wrote:
> Wendy Smoak wrote:
>
>> Nothing changed that I know of... it's always been like this, and you
>> have to go change the permissions on new files that you deploy.
>
> I probably couldn't explain the issue properly. I know that we have
> to update the permissions in terms of chmod, in particular make
> files group-writable. The new situation is that it's apparently no
> longer enough to set the permissions, one also needs to update the
> group membership of the files. And that's a change AFAICT because I
> never had to deal with this before, it just worked.
>
>
> Benjamin
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Benjamin Bentmann <be...@udo.edu>.
Wendy Smoak wrote:
> Nothing changed that I know of... it's always been like this, and you
> have to go change the permissions on new files that you deploy.
I probably couldn't explain the issue properly. I know that we have to
update the permissions in terms of chmod, in particular make files
group-writable. The new situation is that it's apparently no longer
enough to set the permissions, one also needs to update the group
membership of the files. And that's a change AFAICT because I never had
to deal with this before, it just worked.
Benjamin
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Group ownership for files on p.a.o
Posted by Wendy Smoak <ws...@gmail.com>.
On Mon, Aug 17, 2009 at 5:27 AM, Benjamin
Bentmann<be...@udo.edu> wrote:
> Is anybody aware of changes in our tooling that could cause this? Infra said
> we would have to do "chmod" and "chgrp", was that ever the case and changed
> recently?
Nothing changed that I know of... it's always been like this, and you
have to go change the permissions on new files that you deploy. If
you can't find the person who owns them, you can usually delete and
re-deploy them.
--
Wendy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org