From owner-svn-ports-all@FreeBSD.ORG Thu Apr 9 17:36:04 2015 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D2276429; Thu, 9 Apr 2015 17:36:04 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 63E97BED; Thu, 9 Apr 2015 17:36:03 +0000 (UTC) Received: from [192.168.0.100] ([87.139.233.65]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0LzLJR-1ZSod61SIj-014Wu5; Thu, 09 Apr 2015 19:36:01 +0200 Message-ID: <5526B881.2090009@gmx.de> Date: Thu, 09 Apr 2015 19:36:01 +0200 From: olli hauer User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Mark Felder Subject: Re: svn commit: r383645 - head References: <1428593223.2002719.251304317.0D4C0DB4@webmail.messagingengine.com> In-Reply-To: <1428593223.2002719.251304317.0D4C0DB4@webmail.messagingengine.com> Content-Type: text/plain; charset=iso-8859-15 Content-Transfer-Encoding: 8bit X-Provags-ID: V03:K0:Zl+1mdgTidJVavbWMskx/hZ1qMGkjG6ce3qvtHIr6DzTJ+P/F3e CLLDZq7HxsbpMAk/SymtLiVA3gkFbQUP/UGuuNxgsA/YeYVrRleTuvFaRZR5Rbgs/DrplpK DAdTMRgslX84vPD5LI02MIWgjdljtXe1bhMpBft/a9urO3hYBs6sNtj6yN0PX1U0cuXI/xW ylOOWAAivpb0NNoUjymOg== X-UI-Out-Filterresults: notjunk:1; Cc: svn-ports-head@freebsd.org, svn-ports-all@freebsd.org, ports-committers@freebsd.org X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 17:36:04 -0000 On 2015-04-09 17:27, Mark Felder wrote: > > > On Thu, Apr 9, 2015, at 10:20, Olli Hauer wrote: >> If i look into dnscrypt-proxy I see no USERS/GROUPS line so it is not >> clear for me why it conflicts >> >> http://svnweb.freebsd.org/ports/head/dns/dnscrypt-proxy/Makefile?annotate=379448 >> > > haha, wait a minute here -- I added the user a while back before sguil > existed. It's definitely in the dnscrypt-proxy Makefile. > > USERS= _dnscrypt-proxy > > http://svnweb.freebsd.org/ports/head/dns/dnscrypt-proxy/Makefile?r1=356545&r2=356546& > Thanks, I've overseen this on my 4" device (I really should not try to work with such a device) Now with a real console and reviewing the UIDs/GIDs diff I see the origin of my confusion. - dnscrypt-proxy registers only a UID but uses the group nobody. => I only looked at GIDs (there is no entry for dnscrypt-proxy) and instead validating UIDs something trigger t a false positive (layer 8 issue) -- olli