Gentoo Archives: gentoo-dev

From: Mike Gilbert <floppym@g.o>
To: Gentoo Dev <gentoo-dev@l.g.o>
Subject: Re: [gentoo-dev] Best way to handle suid binary in ebuild
Date: Wed, 30 Oct 2013 14:36:07
Message-Id: CAJ0EP43iU4tYADZ1XQBWJcSHCXNPFrFg2Bp=F5MSs3EY=p704g@mail.gmail.com
In Reply to: [gentoo-dev] Best way to handle suid binary in ebuild by Vincent-Xavier JUMEL
1 On Wed, Oct 30, 2013 at 8:17 AM, Vincent-Xavier JUMEL
2 <endymion+gentoo@×××××××××××.net> wrote:
3 > Hi everyone,
4 >
5 > I'm developping and using a sympa ebuild for personnal use on a Gentoo
6 > box.
7 >
8 > In order to work correctly with postfix, sympa needs to have its binary
9 > /usr/libexec/queue and /usr/libexec/bouncequeue with the SUID bit
10 > activated.
11 >
12 > What is, in your opinion, the best way to handle it ?
13 > einfo ?
14 > setuid in post_install ?
15 >
16
17 In src_install:
18
19 fperms 4755 /usr/libexec/queue /usr/libexec/bountqueue