OpenPKG Users & Permissions

OpenPKG is designed to allow non-root users to build packages, and to install it so long as the package doesn't require special ownership (e.g. setuid root programs). OpenPKG provides four distinct user/group combinations (the %{xxx} indicates RPM macros used throughout OpenPKG's RPM SPEC files):

1. SuperUser (%{l_susr},%{l_sgrp}), the system administrator account. Normally this is the same as the system's root user. This account is used to install packages on the systems.

2. Manager (%{l_musr},%{l_mgrp}), the owner of most of the OpenPKG systems files and directories. This is normally the user account being used to build software. This account may also install software that doesn't require ownership other than %{l_musr},%{l_mgrp}.

   Celestial's /csoft packages use the account and group name ``csoftmgr''.

3. Restricted (%{l_rusr},%{l_rgrp}), the acccount used for packages that require restricted access (e.g. MySQL's private directories). Typically files and directories owned by the restricted user will not be readable by others.

   Celestial's /csoft packages use the account and group name ``csoftdev''.

4. Nobody (%{l_nusr},%{l_ngrp}), the account used for general access by outsiders with no special priviledges.

   Celestial's /csoft packages use the account and group name ``csoftmgr''.