CESNET Security Product Team
Links
Subsystems Maintained by the Product Team
External Dependencies
EMI-1/2/3
The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.
Package |
Repository |
Version |
globus-gssapi-gsi-devel |
EPEL |
— |
libxml2-devel |
sl-security |
— |
gsoap |
EPEL |
— |
voms |
EMI |
— |
emi-version |
EMI |
— |
bdii |
EMI |
— |
glite-info-provider-service |
EMI |
— |
glite-yaim-bdii |
EMI |
— |
glite-yaim-core |
EMI |
— |
globus-gss-assist |
EPEL |
— |
globus-usage |
EPEL |
— |
myproxy-libs |
EPEL |
— |
myproxy-admin |
EPEL |
— |
fetch-crl |
EPEL |
— |
c-ares |
EMI 3rd Party |
1.7 |
gLite 3.2
The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.
Package |
Repository |
Version |
c-ares |
gLite externals |
1.6.0-1.el5 (recommended 1.7.3-1.sl5, 1.6.0-2.el5 in EPEL) |
gpt |
gLite externals |
3.2autotools2004_NMI_9.0_x86_64_rhap_5-1 |
vdt_globus_essentials |
gLite externals |
VDT1.10.1x86_64_rhap_5-4 |
myproxy |
gLite externals |
VDT1.10.1x86_64_rhap_5 |
gLite 3.1
The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.
Package |
Repository |
Version |
c-ares |
ext |
1.3.0-4.slc4 |
myproxy |
ext |
VDT1.6.1x86_rhas_4-7 |
vdt_globus_essentials |
ext |
VDT1.6.1x86_rhas_4-9 |
Package Structure
Package Structure Modifications in EMI-2
Traditional modules have been split into
runtime, development and
utility packages as mandated by the applicable packaging rules. The resulting module structure for all L&B-relevant packages is shown in the table bellow. New ones are shown in
bold.
EMI Product Teams depending on any of those packages for their builds need to change their dependency to the
-devel versions of the modules/packages for EMI 2!
Run-time dependence on any of these packages must be changed to the
-progs version of the modules/packages for EMI 2!
PX/ProxyRenewal |
Original Components |
EMI 1 Package |
Etics Components since EMI 2 |
EMI 2 RPMs |
EMI 2 Debs |
emi.px.myproxy-yaim |
glite-px-myproxy-yaim |
emi.px.myproxy-yaim |
glite-px-myproxy-yaim |
glite-px-myproxy-yaim |
emi.px.proxyrenewal |
glite-px-proxyrenewal |
emi.px.proxyrenewal emi.px.proxyrenewal-devel emi.px.proxyrenewal-libs emi.px.proxyrenewal-progs |
glite-px-proxyrenewal glite-px-proxyrenewal-devel glite-px-proxyrenewal-libs glite-px-proxyrenewal-progs |
glite-px-proxyrenewal libglite-security-proxyrenewal2 libglite-security-proxyrenewal-dev glite-px-proxyrenewal-progs |
emi.px.emi-px |
emi-px |
emi.px.emi-px |
emi-px |
emi-px |
GridSite (Changes for EMI-2 Matterhorn effected on 16 April 2012 highlighted with an underscore) |
Original Components |
EMI 1 Package |
Etics Components since EMI 2 |
EMI 2 RPMs |
EMI 2 Debs |
emi.gridsite.1.5-compat |
gridsite-1.5-compat |
|
|
|
emi.gridsite.apache |
gridsite-apache |
emi.gridsite.apache |
gridsite-apache gridsite |
gridsite-apache gridsite |
emi.gridsite.commands |
gridsite-commands |
emi.gridsite.commands |
gridsite-commands |
gridsite-commands |
emi.gridsite.core |
gridsite-debuginfo |
emi.gridsite.core |
gridsite-debuginfo |
|
emi.gridsite.devel |
gridsite-devel |
emi.gridsite.devel |
gridsite-devel |
libgridsite-dev |
emi.gridsite.gsexec |
gridsite-gsexec |
emi.gridsite.gsexec |
gridsite-gsexec |
gridsite-gsexec |
emi.gridsite.service-clients |
gridsite-service-clients |
emi.gridsite.service-clients |
gridsite-service-clients |
gridsite-service-clients |
emi.gridsite.services |
gridsite-services |
emi.gridsite.services |
gridsite-services |
gridsite-services |
emi.gridsite.shared |
gridsite-shared |
emi.gridsite.libs |
gridsite-libs |
libgridsite1.7 |
emi.gridsite.slashgrid |
gridsite-slashgrid |
emi.gridsite.slashgrid |
gridsite-slashgrid |
gridsite-slashgrid |
GSS/gSOAP-plugin |
Original Components |
EMI 1 Package |
Etics Components since EMI 2 |
EMI 2 RPMs |
EMI 2 Debs |
emi.lbjp-common.gss |
glite-lbjp-common-gss |
emi.lbjp-common.gss emi.lbjp-common.gss-devel |
glite-lbjp-common-gss glite-lbjp-common-gss-devel |
libglite-security-gss9 libglite-lbjp-common-gss-dev |
emi.lbjp-common.gsoap-plugin |
glite-lbjp-common-gsoap-plugin |
emi.lbjp-common.gsoap-plugin emi.lbjp-common.gsoap-plugin-devel |
glite-lbjp-common-gsoap-plugin glite-lbjp-common-gsoap-plugin-devel |
libglite-lbjp-common-gsoap-plugin libglite-lbjp-common-gsoap-plugin-dev |
Package Structure Modifications in EMI-3
Package |
Change in status |
gridsite-slashgrid |
Removed! |
gridsite-gsexec |
Removed! |
gridsite (gridsite-apache ) |
gridsite-copy.cgi and gridsite-storage.cgi removed |
Dependency Modifications for EMI-3
Dependencies. New deps. in bold:
EMI1, EMI2: Exceptions from Packaging Rules
Explaining necessary exceptions from applicable packaging rules.
The affected programs (
gsexec
and =slashgrid) have special uses that require specific permissions. However, they will not be included in the EMI-3 release so EMI-3 will not suffer from this.
File |
Exceptions |
Explanation |
/usr/sbin/gsexec |
setuid-binary non-standard-executable-perm |
gsexec is used by the Apache HTTP Server to switch to another user before executing CGI programs. In order to achieve this, it must run as root. Since the HTTP daemon normally doesn't run as root, the gsexec executable needs the setuid bit set and must be owned by root. |
/usr/sbin/slashgrid |
non-standard-executable-perm |
gridsite-slashgrid.x86_64: E: non-standard-executable-perm /usr/sbin/slashgrid 0744
A standard executable should have permission set to 0755. If you get this
message, it means that you have a wrong executable permissions in some files
included in your package. |
/var/spool/slashgrid |
non-standard-dir-perm |
gridsite-slashgrid.x86_64: E: non-standard-dir-perm /var/spool/slashgrid 0700
A standard directory should have permission set to 0755. If you get this
message, it means that you have wrong directory permissions in some dirs
included in your package. |
/etc/rc.d/init.d/slashgrid |
non-standard-executable-perm |
gridsite-slashgrid.x86_64: E: non-standard-executable-perm /etc/rc.d/init.d/slashgrid 0744
A standard executable should have permission set to 0755. If you get this
message, it means that you have a wrong executable permissions in some files
included in your package. |
/etc/rc.d/init.d/slashgrid |
postin-without-chkconfig |
gridsite-slashgrid.x86_64: E: postin-without-chkconfig /etc/rc.d/init.d/slashgrid
The package contains an init script but doesn't call chkconfig in its %post
script. |
/etc/rc.d/init.d/slashgrid |
preun-without-chkconfig |
gridsite-slashgrid.x86_64: E: preun-without-chkconfig /etc/rc.d/init.d/slashgrid
The package contains an init script but doesn't call chkconfig in its %preun
script. |
/etc/rc.d/init.d/slashgrid |
no-status-entry |
gridsite-slashgrid.x86_64: E: no-status-entry /etc/rc.d/init.d/slashgrid
In your init script (/etc/rc.d/init.d/your_file), you don't have a 'status'
entry, which is necessary for good functionality. |
Backward Incompatibilities
- Unused components removed:
-
gsexec
-
slashgrid
-
gridsite-copy.cgi
and gridsite-storage.cgi
- Major version change and library versioning cleanup: single-component numbering for soname:
libgridsite.so.2