[bug #13730] cons.saver lacking privileges
- From: Oswald Buddenhagen <savannah-bounces gnu org>
- To: Oswald Buddenhagen <ossi kde org>, mc-devel gnome org
- Subject: [bug #13730] cons.saver lacking privileges
- Date: Mon, 11 Jul 2005 16:35:25 +0000
Summary: cons.saver lacking privileges
Project: GNU Midnight Commander
Submitted by: ossi
Submitted on: Mon 07/11/2005 at 16:35
Severity: 3 - Normal
Assigned to: None
Release: current (CVS or snapshot)
Platform Version: GNU/Linux
this has been discussed to death already, but i've seen no viable solution so
far, only hack suggestions and general paranoia.
the problem is, that "classical" 'configure && make && su -c make install'
installations from upstream source have a non-working cons.saver, because it
lacks access to /dev/vcsa?.
the preferred solution is having a vcsa group which /dev/vcsa? belong to and
to which cons.saver is set-gid. however, there is no portable way across linux
distros to accomplish this.
the pragmatic solution is just having cons.saver set-uid root and leaving
potentially safer variants to distro-specific packages, like many other
applications in the same situation do. after a security audit of the really
small cons.saver source this variant should be perfectly applicable.
Reply to this item at:
Message sent via/by Savannah
] [Thread Prev