Re: permission to write to /usr/local/share/packagename

[Beco <rcb@beco.cc>]

On 5 October 2013 07:43, Gert Wollny <gw.fossdev@gmail.com> wrote:

[snip]

>> chmod g+s mytouch
>
> You shouldn't have to do this. Are you sure that you are in the games
> group?, i.e. after adding yourself to the games group, did you logout
> and login again?
>
> As member of the games group on my Debian system I can co
>   nano /var/games/<some-games-file>
> without problems, and nano is certainly not SGID.
>
> BTW: The freedesktop description Paul Wise linked to didn't talk about
> the user being in the games group. The disadvantage of the user being in
> the games group is of course that she can simple edit the highscore
> file ;)
>
> Cheers,
> Gert
>

Hi Gert,

Yep, now it worked. I probably forgot to login/logout! :)

Regarding the options (A) use SGID or (B) add all users to games group,
I'm (much) more inclined to only allow the binary to have such permissions!

Of course one can change the source and recompile, but the new binary wont
have the SGID set (I suppose).

And it is much more difficult to download a source, change the
program, recompile, etc.,
than just let some curious user use "vi", or "nano", or "rm" command.

Isn't that so?

Thanks man.

Beco.