cvs commit: ports/audio/arts Makefile
Brian F. Feldman
green at FreeBSD.org
Tue Mar 2 07:54:00 PST 2004
Will Andrews <will at csociety.org> wrote:
> On Tue, Mar 02, 2004 at 07:47:52AM -0600, Jacques A. Vidrine wrote:
> > P.S. I don't mean to pick on this port in particular. I believe there
> > are other ports that install set-user-ID binaries where it is not
> > essential. I just haven't had a chance to make a sweep of the tree yet
> > to identify them.
>
> I agree with Michael - I'd rather have working software than
> a false sense of security, when it comes to desktop software.
>
> If you are going to push a "make all setuid bits optional"
> agenda, I suggest coming up with a standard means of letting the
> administrator specify their policy regarding those. You could
> also offer alternate means of achieving the effect that set-id
> wrappers/programs intend with their privileges.
>
> Unfortunately, in arts' case, setpriority(2) is superuser-only.
> Perhaps in FreeBSD 5, we should start implementing standard means
> of allowing programs like artsd to call setpriority(2) without
> privileges, e.g. through MAC.
Is it setpriority(2) or rtprio(2)? The latter was implied, and it is NOT
acceptable to have ports use rtprio(2) without consent from the system
administrator -- and not implicit consent, either.
--
Brian Fundakowski Feldman \'[ FreeBSD ]''''''''''\
<> green at FreeBSD.org \ The Power to Serve! \
Opinions expressed are my own. \,,,,,,,,,,,,,,,,,,,,,,\
More information about the cvs-all
mailing list