[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

svgalib and suid root

I maintain zblast-svgalib, a svgalib game which has no suid bit
(only sgid games).  I got a bug report (#158058) complaining that
the default configuration does not allow a normal user to play it.
I know some other svgalib games are suid root (gravitywars, for example).

1. Does a svgalib game really require root privilege,
   or is rw access to some device file enough?
2. I have not audited zblast (not to mention svgalib) enough to justify
   suid root.  Is there any good workaround[1]?  A note in README.Debian
   about dpkg-statoverride?

A full audit is best, but you will get sick if you see the source of zblast.

Oohara Yuuma <oohara@libra.interq.or.jp>
Debian developer
PGP key (key ID F464A695) http://www.interq.or.jp/libra/oohara/pub-key.txt
Key fingerprint = 6142 8D07 9C5B 159B C170  1F4A 40D6 F42E F464 A695

Better just encrypt it all in your head :-).
--- Derrick 'dman' Hudson, about encryption without any physical medium

Reply to: