[OpenAFS] openafs-1.4.2 RHEL RPM package installs nonempty SuidCells and mangles CellServDB

[Derrick J Brashear]

On Fri, 17 Nov 2006, Carson Gaspar wrote:

> As another data point for y'all, we overwrite the new init scripts with more 
> sane ones. For those of us in enterprise environments that have no desire or 
> ability to talk to random Internet AFS cells, it's a terrible idea. The 
> current code has no way to disable the new behaviour, and the shell code has 
> no error checking to speak of. I wish this had been discussed before it was 
> incorporated into the release.

We have to distribute RPMs which will continue to upgrade CellServDB 
files, or people will keep trying to talk to cells in places they aren't 
any more, and haven't been for years. This has been an ongoing problem.

However, the thing that may make sense is a package which does not munge 
configuration which conflicts with the regular package but can be 
installed in place of it, to address this issue. I'm unsure how we could 
handle documenting it, as I'm sure everyone who doesn't bother to read 
instructions will try to install both, get a conflict, and be confused.