Re: Any progress with FIS GT.M?
Hi,
please note that I reorganised SVN a bit to get rid of previous
packaging attempts which are now obsolete since we are profiting from
new build system.
On Fri, Jun 29, 2012 at 10:07:19AM -0400, Yaroslav Halchenko wrote:
> Hi Luis,
>
> Great to hear that we are almost there. Next step actually would be to
> make sure it builds "correct" binary packages in a clean
> environment (e.g. using pbuilder or cowbuilder).
The cowbuilder build works in the sense of creating the *.deb packages.
> Last time I have tried
> (22nd of June), and that was the same 5.5-000+git104-g4077ab8 the
> resultant .deb's were lacking executable permissions on all binaries...
> we also need assure suid root on
> ./usr/lib/fis-gtm/V5.5-000_x86_64/gtmsecshr and chmod 700
> ./usr/lib/fis-gtm/V5.5-000_x86_64/gtmsecshrdir to match upstream's
> "fortification" effort.
>
> using pbuilder or cowbuilder is plain easy when you have .dsc source
> package already... pretty much in simplest case:
>
> cowbuilder --create # to be done once to create clean env
> cowbuilder --build bla.dsc # to build source package into binaries
>
> also change back to debian/compat 9 (am I repeating myself? ;) so I just
> did it ;-) ) to get advantage of security fortification compile
> flags out of the box
I think this is all fine so far. I only found two issues:
1. There is nothing in /usr/bin - so I have no idea what to call and
there is also no explanation in README.Debian which might help the
user
2. Lintian throws 267 runtime errors saying things like
/bin/tar: ./usr/lib/fis-gtm/V5.5-000_x86_64/utf8/_D.m: Cannot open: Permission denied
/bin/tar: ./usr/lib/fis-gtm/V5.5-000_x86_64/utf8/_PATCODE.m: Cannot open: Permission denied
/bin/tar: ./usr/lib/fis-gtm/V5.5-000_x86_64/utf8/_GSE.m: Cannot open: Permission denied
...
IMHO this sucks and will probably result in a rejection because
lintian is run to seek for policy errors and if lintian throws
runtime errors something is probably so broken that ftpmaster
not consider looking at it.
Kind regards
Andreas.
--
http://fam-tille.de
Reply to: