Package Details: plex-media-server 1.41.2.9200-1

Git Clone URL: https://aur.archlinux.org/plex-media-server.git (read-only, click to copy)
Package Base: plex-media-server
Description: The back-end media server component of Plex.
Upstream URL: https://plex.tv/
Keywords: DLNA
Licenses: custom
Conflicts: plex-media-server-plexpass
Submitter: alucryd
Maintainer: fryfrog (tixetsal)
Last Packager: fryfrog
Votes: 348
Popularity: 0.014055
First Submitted: 2014-10-14 22:11 (UTC)
Last Updated: 2024-11-14 23:11 (UTC)

Latest Comments

« First ‹ Previous 1 .. 48 49 50 51 52 53 54 55 56 57 58 .. 107 Next › Last »

justin8 commented on 2015-04-26 13:10 (UTC)

Thanks for the fast responses, That covers most of my concerns with the package anyway.

alucryd commented on 2015-04-26 11:40 (UTC)

Ultimately AUR packages are still handled by pacman, as such I believe they should be treated the same way as packages in our repos. As for chowning to a random UID, I would like to remind you that /var/lib/plex is empty by default, that 421:421 is different from all system critical UID:GID, that they likely don't exist, and even if they did, I don't see how some evil user could turn this to his advantage. Anyway, I refined the install file so that no user/group manipulation should be needed in most cases. It now checks if UID 421 or GID 421 are already taken by anything else and prints a warning when they are, in that unlikely case people should usermod -u or groupmod -g the conflicting user/group. Then if the plex user differs from the new default (for people who are upgrading from an old version), it will delete it along with the plex group and recreate them afterwards (note that it will fail to delete the plex group if several users belong to it, but I don't see why people would do that).

justin8 commented on 2015-04-26 09:39 (UTC)

I thought the consensus of that mailing list discussion was to not change anything in the AUR until a reasonable method of reserving a UID had been decided. When that discussion was active I asked Gaeton what it meant in relation to AUR packages and was advised not to change anything as there was no way to reserve UID/GID currently for the AUR. Is there some change to that stance? If so I should update many of my packages. FYI, I think djo0012 was having more of an issue with just assuming the user was there with no checks or attempts to create it or warnings to the user; just chowning files to a random UID; which *is* a security hole no matter how you look at it.

alucryd commented on 2015-04-26 07:50 (UTC)

No, it applies everywhere, and there's a very good reason for that. For pacman to track file and folder permissions, those have to be set inside the PKGBUILD, not the install file. Now, how can you use plex:plex to do that if it hasn't been created yet? You can't, non-existent users and groups cannot be used, but uid:gid can, period. While maybe not ideal, there is absolutely nothing wrong here, and I'm quite sure every IT field agrees with that... BTW it's almost impossible that some user already has uid 421, unless it was on purpose. Just create a system user without specifying uid:gid and check what you get. I'm willing to bet you'll need a few hundred of'em to reach 421, so there goes your so-called security hole. XBMC uses 420:420, so I picked 421:421. No official package conflicts with that, and if an AUR package conflicts, just notify its maintainer, I'm sure he will gladly change it.

justin8 commented on 2015-04-26 06:22 (UTC)

Yeah.. I'm pretty sure the hard-coded ID thing recently discussed was for official packages where they have allocated IDs already. I was under the impression that AUR packages had no way of doing that. Either way, the way to do that would be to create your user with the ID xxx but then change ownership by name. that would allow for people to move it if it is conflicting, but also keep it hard coded if that was desired. The current implementation is just a big security hole.

djo0012 commented on 2015-04-26 01:55 (UTC)

Using hard code ID is wrong in every IT field, it is even more in a package build that should run across heterogeneous system and should never conflict with another package. Using constant name might be harder than using ID but this is the way to go.

alucryd commented on 2015-04-25 11:28 (UTC)

There is nothing wrong with the package. Before it created plex:plex with random UID:GID, that can't do. I chose 421:421 when I took over, it's up to you to make sure you're using those. I'll complete the install message to include this bit.

ansar commented on 2015-04-25 11:22 (UTC)

Hi, I have a problem with the package. It's modify the owner of a directory: chown 421:421 -R "${pkgdir}"/var/lib/plex But the plex user/group is not the 421 in my case, and it won't start from systemd. After setting the right owner for the folder the service starts nicely. Can you look into it? Thanks!

alucryd commented on 2015-04-22 09:07 (UTC)

jd1pek: Do you have an up to date system? Looks to me you're using an old makepkg, no wonder you can't download the source. all: Just added arm and armv7h architectures in the arch array, enjoy. Do tell if there's something wrong, I don't have any device supporting those arches and can't test unforutunately.

jd1pek commented on 2015-04-15 02:43 (UTC)

I am having trouble building this. $ makepkg ==> Making package: plex-media-server 0.9.11.16.958-1 (Tue Apr 14 19:39:25 PDT 2015) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Retrieving sources... -> Found plexmediaserver.conf.d -> Found plexmediaserver.service -> Found terms.txt ==> Validating source files with sha256sums... plexmediaserver.conf.d ... Passed plexmediaserver.service ... Passed terms.txt ... Passed ==> Extracting sources... ==> Entering fakeroot environment... ==> Starting package()... cp: cannot stat 'usr/lib/plexmediaserver': No such file or directory ==> ERROR: A failure occurred in package(). Aborting...

« First ‹ Previous 1 .. 48 49 50 51 52 53 54 55 56 57 58 .. 107 Next › Last »