Re: The right way for suid-bit-programs?!
Hi,
>>"Matthew" == Matthew Wilcox <willy@odie.barnet.ac.uk> writes:
Matthew> Michael Bramer
>>
>> But in this package is a binary, that need a 'chmod u+s' to root because
>> it play with ioctl system calls. (blink LEDs on the keyboard)
>>
>> Have we a policy for that?
Well, look at the source and make sure that it does not have
trojan horses ;-), and mention the suid behaviour in man pages and
in /usr/doc/package/. There is no policy on this as such; the
developers are expected to excercise caution.
Matthew> Use suidmanager.
That is not policy.
__> zgrep -i suidmanager /usr/doc/debian-policy/*.text.gz
__> zgrep -i suid /usr/doc/debian-policy/*.text.gz
__> dpkg -s suidmanager
Package: suidmanager
Status: purge ok not-installed
Priority: optional
Section: admin
manoj
--
You can write a small letter to Grandma in the filename. Forbes
Burkowski, CS, University of Washington
Manoj Srivastava <srivasta@acm.org> <http://www.datasync.com/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E
Reply to: