[bug #13730] cons.saver lacking privileges

[Oswald Buddenhagen <savannah-bounces gnu org>]

URL:
  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=13730>

                 Summary: cons.saver lacking privileges
                 Project: GNU Midnight Commander
            Submitted by: ossi
            Submitted on: Mon 07/11/2005 at 16:35
                Category: Subshell
                Severity: 3 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
                 Release: current (CVS or snapshot)
        Platform Version: GNU/Linux

    _______________________________________________________

Details:

this has been discussed to death already, but i've seen no viable solution so
far, only hack suggestions and general paranoia.
the problem is, that "classical" 'configure && make && su -c make install'
installations from upstream source have a non-working cons.saver, because it
lacks access to /dev/vcsa?.
the preferred solution is having a vcsa group which /dev/vcsa? belong to and
to which cons.saver is set-gid. however, there is no portable way across linux
distros to accomplish this.
the pragmatic solution is just having cons.saver set-uid root and leaving
potentially safer variants to distro-specific packages, like many other
applications in the same situation do. after a security audit of the really
small cons.saver source this variant should be perfectly applicable.







    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=13730>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/