Re: Gnomehack installation problems.



On Thu, 15 Mar 2001, Joseph Elwell wrote in gnomehack other debian org:
> I just installed gnomehack using an rpm i got through
> nautilus:
> gnomehack-1.0.5-1
> 
> When I try to run the application I get this error:
> Gtk-WARNING **: This process is currently running
> setuid or setgid.
> This is not a supported use of GTK+. You must create a
> helper
> program instead. For further details, see:
> 
>     http://www.gtk.org/setuid.html
> 
> Refusing to initialize GTK+.

This is a new feature of GTK+ v1.2.9 (discussed at length on gtk-list).

> Both gnomehack and nethack were installed suid as
> root. :( That sounds like a security hole waiting to
> be exploited. chmod -s to both gnomehack and nethack
> didn't help. although nethack will run just fine
> anyways, gnomehack still won't run.

Ouch. The recommended configuration is setgid games, but GTK+ v1.2.9 won't
allow that either. You have two choices, either drop down to GTK+ v1.2.8 or
configure gnomehack to run without setuid/setgid (in which case there will be
nothing to prevent save file abuse, but this may not matter if you can trust
every player on your system).

If you decide to go for GTK+ v1.2.8, _please_ reconfigure gnomehack for setgid
games.

Note: You will need the source to reconfigure gnomehack. While you're at it you
might consider upgrading to NetHack 3.3.1 and using the gnome interface (which
was integrated from gnomehack when that went unmaintained). The same
setuid/setgid issues apply.

[Owen, that's one point to you I believe :-)]

-- 
Ali Harlow                              Email: ali avrc city ac uk
Research programmer                     Tel:   (020) 7477 8000 X 4348
Applied Vision Research Centre          Intl: +44 20 7477 8000 X 4348
City University                         Fax:   (020) 7505 5515
London                                  Intl: +44 20 7505 5515




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]