Gentoo Archives: gentoo-dev

From: Peter Stuge <peter@×××××.se>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Kernel compiles and you
Date: Wed, 04 Jul 2012 20:31:26
Message-Id: 20120704203020.19433.qmail@stuge.se
In Reply to: Re: [gentoo-dev] Kernel compiles and you by Michael Weber
1 Michael Weber wrote:
2 > I think running kernels from non-root checkouts is a pretty big
3 > security hole.
4
5 Suggest think again.
6
7 The Linux kernel should not and really must not be built as root.
8 This is neither supported nor recommended nor tested by upstream.
9 You may recall there was a kernel build system bug which ran -rf /
10 which would be bad if you built as root.
11
12 The administrator usually has a normal user account somewhere. Use
13 that to build.
14
15 -sources ebuilds installing 755 root:root to /usr/src/linux is fine,
16 but best avoid building in-tree in that case.
17
18
19 //Peter

Replies

Subject Author
Re: [gentoo-dev] Kernel compiles and you Matthew Marlowe <matt@××××××××××××××××××××.com>
Re: [gentoo-dev] Kernel compiles and you Dan Douglas <ormaaj@×××××.com>