svgalib and suid root
I maintain zblast-svgalib, a svgalib game which has no suid bit
(only sgid games). I got a bug report (#158058) complaining that
the default configuration does not allow a normal user to play it.
I know some other svgalib games are suid root (gravitywars, for example).
1. Does a svgalib game really require root privilege,
or is rw access to some device file enough?
2. I have not audited zblast (not to mention svgalib) enough to justify
suid root. Is there any good workaround[1]? A note in README.Debian
about dpkg-statoverride?
[1]
A full audit is best, but you will get sick if you see the source of zblast.
--
Oohara Yuuma <oohara@libra.interq.or.jp>
Debian developer
PGP key (key ID F464A695) http://www.interq.or.jp/libra/oohara/pub-key.txt
Key fingerprint = 6142 8D07 9C5B 159B C170 1F4A 40D6 F42E F464 A695
Better just encrypt it all in your head :-).
--- Derrick 'dman' Hudson, about encryption without any physical medium
Reply to: