Re: [Security-Discuss] problem with 2005 cpio update

On 12-Jul-05, at 8:57 PM, Rolf Pedersen wrote:

>> If you ever have a problem with a package or urpmi complains  
>> about  something, snoop in /var/cache/urpmi first... chances are  
>> the file is  there and you can do your rpm -K and whatnot on the  
>> file directly  (and on the actual file that urpmi is complaining  
>> about).
>>
>> Probably saves more time and in the case of big packages like   
>> OpenOffice, a fair amount of bandwidth to boot.  =)
>>
>>
> Right, things don't always work the way I expect them to.  Thanks  
> for the pointer.
>
> However, in the interim, I am seeing more reports of people having  
> the same problem.  One user found that /sbin/rmt was a link,  
> leading me to think that some script creates it and no package  
> claims to provide it (tar?).  To review my experience, with tar  
> already installed:
>
> # urpmi --clean --skip kernel-source --update --auto-select
> Some package requested cannot be installed:
> cpio-2.6-3.1.102mdk.i586 (due to unsatisfied /sbin/rmt)
> Continue? (Y/n)
> # urpmf /sbin/rmt
> tar:/sbin/rmt-tar
> rmt:/sbin/rmt-dump
> openafs-server:/usr/sbin/rmtsysd
> star:/usr/sbin/rmt-star
>
> Perhaps it bears some further scrutiny?  There are forum threads here:
>
> http://forum.mandrivaclub.com/viewtopic.php?t=38123
>
> http://forum.mandrivaclub.com/viewtopic.php?t=38137

No, I'm well aware of the issue.  For one, it should be fixed in  
cooker (requires on files, in my opinion, are stupid... tar should  
have a virtual provides of rmt rather than cpio requiring /sbin/ 
rmt).  The next time cpio gets updated we'll fix it, but it doesn't  
make much sense to issue a new update just to fix this (pick tar when  
the popup comes up and off you go).

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}