cvs commit: ports/audio/arts Makefile

Will Andrews will at csociety.org
Tue Mar 2 07:38:32 PST 2004


On Tue, Mar 02, 2004 at 07:47:52AM -0600, Jacques A. Vidrine wrote:
> P.S.  I don't mean to pick on this port in particular.  I believe there
> are other ports that install set-user-ID binaries where it is not
> essential.  I just haven't had a chance to make a sweep of the tree yet
> to identify them.

I agree with Michael - I'd rather have working software than
a false sense of security, when it comes to desktop software.

If you are going to push a "make all setuid bits optional"
agenda, I suggest coming up with a standard means of letting the
administrator specify their policy regarding those.  You could
also offer alternate means of achieving the effect that set-id
wrappers/programs intend with their privileges.

Unfortunately, in arts' case, setpriority(2) is superuser-only.
Perhaps in FreeBSD 5, we should start implementing standard means
of allowing programs like artsd to call setpriority(2) without
privileges, e.g. through MAC.

Regards,
-- 
wca
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/cvs-ports/attachments/20040302/f03e7269/attachment.bin


More information about the cvs-ports mailing list