[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Packages' use of dpkg-statoverride

Previously Matt Zimmerman wrote:
> As I said in my original message, to avoid a problem like this, all binaries
> should be shipped non-suid, and optionally overridden to suid.

You should ship it in the most often used configuration, and set the
override beforehand if needed. That way you don't get unexpected breakage
if for some reason the install dies halfway through or takes very long.

I've seen lots of people complain about things like ping suddenly no
longer being suid. statoverrides give us a way to close that window
of brokenness - we have to us it.


 / Generally uninteresting signature - ignore at your convenience  \
| wichert@cistron.nl                  http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |

Reply to: