> > > This same thing applied to all packages linked against svgalib, including
> > > ghostscript.
> > What I've done with gs is make it _not_ setuid by default.
> svgalib drops SU privileges after init. You only should veryfy, that the
> init functio is the first thing called in the application and you are rather
I tried to do that, but the problem is that, if I put the svga_init()
call in gs (as opposed to the wrapper), I don't really know when
gs decides that it is going to output to the VC.
And, if I put the svga_init() call as the first thing in main(),
gs will _always_ say
Using some svgalib driver
This looks confusing, if gs draws on my X screen.
The other option, making the wrapper setuid root, looked even less
attractive to me: Althought the wrapper knows what device gs wants
to use, I alreadly had one bug in my wrapper (buffer overrun), and
I am quite glad it wasn't setuid then.
Use Debian/GNU Linux!
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com
- Re: Setuid
- From: "Bernd Eckenfels" <mail.inka.de!lina!lina.inka.de!lists>