[07:33:01]
<Yunohost Git/Infra notifications> [issues] fflorent [commented](https://github.com/YunoHost/issues/issues/2837#issuecomment-5490435179) on [issue #2837](https://github.com/YunoHost/issues/issues/2837) Trixie migration: 0037_postgresql_15_to_17 fails cause postgresql is already on 18: So it appears that there exists several issues around the initial report.
We would probably better decide which one hav...
[08:04:07]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3902017805) on pull request #2344 Improve file rights: suggestion
"migration_0037_fix_bad_permissions_protected": "{nb} vulnerable paths have been found and protected. ...
[08:04:07]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3901989997) on pull request #2344 Improve file rights: Same question
[08:04:08]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3901989308) on pull request #2344 Improve file rights: What happens if the test fails? What is the value of the umask for the following tests?
(I feel like this can lead to s...
[08:04:08]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3902009899) on pull request #2344 Improve file rights: suggestion
"migration_0037_fix_bad_permissions_disclaimer": "This migration searches for paths writable by other ...
[08:04:10]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3902024137) on pull request #2344 Improve file rights: suggestion
"migration_0037_fix_bad_permissions_unprotected": "{nb} paths might still be unprotected but are proba...
[10:55:53]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3903365166) on pull request #2344 Improve file rights: I think this would be handled by https://github.com/YunoHost/yunohost/pull/2344/changes#diff-22ff0d952ee008dc8ff565d8d51...
[16:53:31]
<Yunohost Git/Infra notifications> [yunohost] zamentur [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3905847574) on pull request #2344 Improve file rights: Fail2ban tourne en root donc le service se lance
[16:53:32]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3905847574) on pull request #2344 Improve file rights: Fail2ban tourne en root donc le service se lance (testé avec ynh-dev)
[16:53:37]
<Yunohost Git/Infra notifications> [yunohost] zamentur pushed to umask_fixes: [fix] Wording Co-authored-by: Florent <florent.git@zeteo.me> ([38c5cf6d](https://github.com/YunoHost/yunohost/commit/38c5cf6dc32ff0a1067f57f7c2a5d32b36ec9eb2))
[16:53:37]
<Yunohost Git/Infra notifications> [yunohost] zamentur [commented](https://github.com/YunoHost/yunohost/pull/2344#issuecomment-5496737970) on [issue #2344](https://github.com/YunoHost/yunohost/pull/2344) Improve file rights: Info about umask in debian https://wiki.debian.org/Debate/umask
[16:53:54]
<Yunohost Git/Infra notifications> [yunohost] zamentur [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3906004902) on pull request #2344 Improve file rights: I close cause i think nsswitch could be use by several app
[16:53:54]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3867118592) on pull request #2344 Improve file rights: suggestion
chmod -R u=rwX,g=---,o=--- /etc/fail2ban
[16:53:59]
<Yunohost Git/Infra notifications> [yunohost] zamentur [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3906085612) on pull request #2344 Improve file rights: suggestion
chown -R dnsmasq:root /etc/dnsmasq.conf /etc/resolv.dnsmasq.conf /etc/dnsmasq.d/
chmod -R u=rX,g=r...
[16:53:59]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3906085612) on pull request #2344 Improve file rights: suggestion
chown -R dnsmasq:root /etc/dnsmasq.conf /etc/resolv.dnsmasq.conf /etc/dnsmasq.d/
chmod -R u=rX,g=r...
[16:55:05]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3867076159) on pull request #2344 Improve file rights: suggestion
chmod -R u=rwX,g=rX,o=--- /var/www/.well-known/*/autoconfig
[17:09:52]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3906356960) on pull request #2344 Improve file rights: Oh, OK, I see. I cant find any documentation of teardown_function (does not seem in pytest documentation either), but...
[17:10:07]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3867044900) on pull request #2344 Improve file rights: suggestion
chmod -R u=rwX,g=rX,o=--- /etc/dovecot
chmod -R u=rwX,g=---,o=--- /etc/dovecot/private
chmod u...
[17:10:07]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3867089815) on pull request #2344 Improve file rights: suggestion
chmod -R u=rwX,g=rX,o=rX /etc/apt
[18:29:53]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3907124587) on pull request #2344 Improve file rights: In term of security its a good idea. But Im not sure at 100% that this will work, as it means that for slapd the confi...
[18:30:05]
<Yunohost Git/Infra notifications> [yunohost] Josue-T edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3907124587) on pull request #2344 Improve file rights: In term of security its a good idea. But Im not sure at 100% that this will work, as it means that for slapd the confi...
[18:42:01]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3907167490) on pull request #2344 Improve file rights: Yes probably as nginx is started as root, its probably reading config file with root rights.
Are we sure that no app m...
[18:42:02]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3907233568) on pull request #2344 Improve file rights: Well this might not work because everything seem owned by root:root. Maybe we can just chown with www-data. Its a possi...
[18:50:58]
<Yunohost Git/Infra notifications> [yunohost] Josue-T pushed to umask_fixes: Make rights more strict Co-authored-by: ljf (zamentur) <zamentur@users.noreply.github.com> ([fe630a21](https://github.com/YunoHost/yunohost/commit/fe630a21602c13e12137cfc3ebb0dc1469693f32))
[19:09:40]
<Yunohost Git/Infra notifications> [yunohost] Josue-T edited a [comment](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3907233568) on pull request #2344 Improve file rights: Well this might not work because everything seem owned by root:root. Maybe we can just chown with www-data. Its a possi...
[19:35:21]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2341#discussion_r3907536099) on pull request #2341 Mail trixie: did a grep -r YNH_USER_MAILFORWARDS on all app repos. It retourned nothing.
[19:41:09]
<Yunohost Git/Infra notifications> tituspijean created repository yunohost-psl-xxl-2024: A presentation (in French) made for the Premier Samedi du Libre XXL, in November 2024 in Paris https://github.com/YunoHost/yunohost-psl-xxl-2024
[19:41:10]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label wontfix
[19:41:10]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label bug
[19:41:10]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label documentation
[19:41:10]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label duplicate
[19:41:11]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label good first issue
[19:41:11]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label question
[19:41:11]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label help wanted
[19:41:11]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] ghost created label invalid
[19:53:31]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] tituspijean pushed to main: Initial commit ([91e27044](https://github.com/YunoHost/yunohost-psl-xxl-2024/commit/91e27044c5c2013d3145f2736e57da48ab7cdfa3))
[19:55:56]
<Yunohost Git/Infra notifications> [yunohost-psl-xxl-2024] tituspijean pushed to main: Shorten file names ([c4938a1a](https://github.com/YunoHost/yunohost-psl-xxl-2024/commit/c4938a1a1fdf4c5e6589a7ad888b7ca85b5abd6b))
[20:15:29]
<Yunohost Git/Infra notifications> tituspijean publicized repository yunohost-psl-xxl-2024: A presentation (in French) made for the Premier Samedi du Libre XXL, in November 2024 in Paris https://github.com/YunoHost/yunohost-psl-xxl-2024
[20:15:29]
<Yunohost Git/Infra notifications> [yunohost] Salamandar pushed to fpu-migr_fix_apt_replace: migrations: trixie: apt: split atomic .replace with multiple .replace ([ffb82e7e](https://github.com/YunoHost/yunohost/commit/ffb82e7e656e64347863c3001c4243aa8d43b4ce))
[20:16:01]
<Yunohost Git/Infra notifications> [yunohost] Salamandar opened [pull request #2363](https://github.com/YunoHost/yunohost/pull/2363) : migrations: trixie: apt: split atomic .replace with multiple .replace
[20:23:30]
<Yunohost Git/Infra notifications> [issues] hidrarga edited [issue #2866](https://github.com/YunoHost/issues/issues/2866) : Install of Yunohost trixie fails on Lime2 ARM board : postsrsd dependency is not installable
[20:23:30]
<Yunohost Git/Infra notifications> [yunohost] Salamandar pushed to fpu-migr_fix_apt_replace: migrations: trixie: apt: split atomic .replace with multiple .replace ([52838385](https://github.com/YunoHost/yunohost/commit/528383856345cd0806bdccd3657d1372d0252c6b))
[20:23:30]
<Yunohost Git/Infra notifications> [yunohost] Salamandar pushed to fpu-migr_fix_apt_replace: migrations: trixie: apt: split atomic .replace with multiple .replace ([97122e3f](https://github.com/YunoHost/yunohost/commit/97122e3fde0a19d25b3f91301df9b2da7821bcef))
[21:07:53]
<Yunohost Git/Infra notifications> [yunohost] Josue-T [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3908239780) on pull request #2344 Improve file rights: What about the case of a filesystem which dont support linux rights and so is mounted with all open rights like: u=rwx...
[21:07:53]
<Yunohost Git/Infra notifications> [yunohost] fflorent [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3908327821) on pull request #2344 Improve file rights: Maybe exclude fuse or any remote storage too?
And report a warning if such a mount exists so the user is aware
[21:07:54]
<Yunohost Git/Infra notifications> [yunohost] Salamandar [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3908372760) on pull request #2344 Improve file rights: I guess we should implement the same logic as --exclude-kernfs of ncdu, this might be more solid. (e.g directly det...
[21:07:54]
<Yunohost Git/Infra notifications> [yunohost] Salamandar [commented](https://github.com/YunoHost/yunohost/pull/2344#discussion_r3908420836) on pull request #2344 Improve file rights: why not just build an array to begin with?