Gentoo Archives: gentoo-dev

From: Ulrich Mueller <ulm@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] useless set*id binaries
Date: Sat, 28 Jan 2012 06:29:50
Message-Id: 20259.38310.170712.434418@a1i15.kph.uni-mainz.de
In Reply to: Re: [gentoo-dev] useless set*id binaries by Samuli Suominen
1 >>>>> On Sat, 28 Jan 2012, Samuli Suominen wrote:
2
3 > i've improved the situation _a bit_:
4
5 > +*cdrtools-3.01_alpha06-r1 (28 Jan 2012)
6 > +
7 > + 28 Jan 2012; Samuli Suominen <ssuominen@g.o>
8 > + +cdrtools-3.01_alpha06-r1.ebuild:
9 > + Change cdda2wav, cdrecord, readcd and rscsi from suid root to sgid
10 > disk for
11 > + udev users (note: tested with cdrecord -scanbus)
12
13 This is definitely not an improvement and should be reverted. The suid
14 root is also needed to elevate cdrecord's scheduling priority.
15
16 And is this such an urgent matter that there wasn't time to file a
17 proper bug? Or have you discussed this change with the package's
18 maintainer?
19
20 if has_version sys-fs/udev; then
21 fowners root:disk /usr/bin/{cdda2wav,cdrecord,readcd} /usr/sbin/rscsi
22 fperms u-s,g+s /usr/bin/{cdda2wav,cdrecord,readcd} /usr/sbin/rscsi
23 fi
24
25 Automagic dependency on udev in src_install? Oh my.
26
27 Ulrich

Replies

Subject Author
Re: [gentoo-dev] useless set*id binaries Samuli Suominen <ssuominen@g.o>