Re: svgalib (restorefont) permissions
Ian Jackson writes:
>Richard Kettlewell writes on debian-user:
>>Note that later versions of the svgalib package discard both the
>>console group and the setuid bit on all of these programs, leaving
>>security and arrangements entirely to local administrators.
>
>You are aware, I take it, that if a local admin replaces the setuid
>bit it will still be cleared at the next reinstallation ?
How about:
The postinst asks whether they should be setuid (with a pointer to a
document explaining the implications of doing this) and record it in a
newly invented config file, say /etc/vga/setuid. If a postinst finds
/etc/vga/setuid then it just follows what it finds there.
When it's determined that the programs are secure they can be setuid
everywhere, but for now I'd rather direct my efforts to making sure
that the svgalib packages install well rather than auditing the code.
ttfn/rjk
Reply to: