Gentoo Archives: gentoo-dev

From: Ciaran McCreesh <ciaran.mccreesh@××××××××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [SECURITY] Minimizing the suid usage
Date: Sun, 23 Mar 2008 18:34:31
Message-Id: 20080323183420.0189116e@snowcone
In Reply to: Re: [gentoo-dev] [SECURITY] Minimizing the suid usage by Alon Bar-Lev
1 On Sun, 23 Mar 2008 20:30:33 +0200
2 "Alon Bar-Lev" <alonbl@g.o> wrote:
3 > > Needs package manager support. Effectively this requires an EAPI
4 > > bump, since ebuilds need to know whether they can rely upon caps
5 > > being preserved across a merge or whether they have to degrade to a
6 > > setuid bit.
7 >
8 > Why? A simple USE flag should be enough, if set use caps, if not use
9 > current.
10
11 A user turns the use flag on, the ebuild creates files using caps
12 rather than set*id, the package manager merges it by copying the file
13 and the installed file ends up with no caps and no set*id bit.
14
15 --
16 Ciaran McCreesh

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] [SECURITY] Minimizing the suid usage Alon Bar-Lev <alonbl@g.o>