Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-dev
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-dev@g.o
From: Samuli Suominen <ssuominen@g.o>
Subject: Re: useless set*id binaries
Date: Sat, 28 Jan 2012 09:19:56 +0200
On 01/28/2012 08:28 AM, Ulrich Mueller wrote:
>>>>>> On Sat, 28 Jan 2012, Samuli Suominen wrote:
>
>> i've improved the situation _a bit_:
>
>> +*cdrtools-3.01_alpha06-r1 (28 Jan 2012)
>> +
>> +  28 Jan 2012; Samuli Suominen<ssuominen@g.o>
>> +  +cdrtools-3.01_alpha06-r1.ebuild:
>> +  Change cdda2wav, cdrecord, readcd and rscsi from suid root to sgid
>> disk for
>> +  udev users (note: tested with cdrecord -scanbus)
>
> This is definitely not an improvement and should be reverted. The suid
> root is also needed to elevate cdrecord's scheduling priority.

Missed that piece of code and reverted then. Any chance you could be 
more specific?

>          if has_version sys-fs/udev; then
>                  fowners root:disk /usr/bin/{cdda2wav,cdrecord,readcd} /usr/sbin/rscsi
>                  fperms u-s,g+s /usr/bin/{cdda2wav,cdrecord,readcd} /usr/sbin/rscsi
>          fi
>
> Automagic dependency on udev in src_install? Oh my.

I don't consider this as a automagic to be worried about at all.
Was bouncing back and forth with 'use kernel_linux' or 'has_version 
sys-fs/udev', since wasn't sure how other devmanagers have permissions 
set. But I guess this is now irrelevant since it's reverted.


Replies:
Re: useless set*id binaries
-- Ulrich Mueller
References:
useless set*id binaries
-- Mike Frysinger
Re: useless set*id binaries
-- Mike Frysinger
Re: useless set*id binaries
-- Mike Frysinger
Re: useless set*id binaries
-- Samuli Suominen
Re: useless set*id binaries
-- Ulrich Mueller
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: useless set*id binaries
Next by thread:
Re: useless set*id binaries
Previous by date:
Re: useless set*id binaries
Next by date:
Lastrite: dev-java/sun-j2ee


Updated Jun 29, 2012

Summary: Archive of the gentoo-dev mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.