[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: setuid/setgid binaries contained in the Debian repository.



On Sat, 2 Aug 2003 22:44:24 +0200, Bernd Eckenfels <lists@lina.inka.de> said: 

> On Sat, Aug 02, 2003 at 02:22:27PM -0500, Manoj Srivastava wrote:
>> > Often, I believe that the discussion will determine whether or
>> > not it truly depends on being setid.
>>
>> That would be really hard to do, unless soneone gets into the nitty
>> gritty of the code and determines it is not.

> This is trivial, and should be documented even in the man page.

	It is? OK, I am telling you /usr/bin/bar program in package
 foo really needs to be sgid. I'll document it in bar.6. Is this the
 end of discussion? Or are we going to really need to look at the code
 to see if the setgidness can be worked around? 

	manoj
-- 
"On the Internet, no one knows you're using Windows NT" (Submitted by
Ramiro Estrugo, restrugo@fateware.com)
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C



Reply to: