Re: The right way for suid-bit-programs?!
>>"Matthew" == Matthew Wilcox <firstname.lastname@example.org> writes:
Matthew> Michael Bramer
>> But in this package is a binary, that need a 'chmod u+s' to root because
>> it play with ioctl system calls. (blink LEDs on the keyboard)
>> Have we a policy for that?
Well, look at the source and make sure that it does not have
trojan horses ;-), and mention the suid behaviour in man pages and
in /usr/doc/package/. There is no policy on this as such; the
developers are expected to excercise caution.
Matthew> Use suidmanager.
That is not policy.
__> zgrep -i suidmanager /usr/doc/debian-policy/*.text.gz
__> zgrep -i suid /usr/doc/debian-policy/*.text.gz
__> dpkg -s suidmanager
Status: purge ok not-installed
You can write a small letter to Grandma in the filename. Forbes
Burkowski, CS, University of Washington
Manoj Srivastava <email@example.com> <http://www.datasync.com/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E