From owner-cvs-all  Thu Mar 22 12:32:13 2001
Delivered-To: cvs-all@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-43.dsl.lsan03.pacbell.net [63.207.60.43])
	by hub.freebsd.org (Postfix) with ESMTP
	id C33F837B71C; Thu, 22 Mar 2001 12:32:03 -0800 (PST)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 68FCC66BD5; Thu, 22 Mar 2001 12:32:03 -0800 (PST)
Date: Thu, 22 Mar 2001 12:32:03 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: FUJISHIMA Satsuki <sf@FreeBSD.org>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: ports/games/nethack-gtk Makefile
Message-ID: <20010322123203.A7023@xor.obsecurity.org>
References: <200103221954.f2MJsfL01875@freefall.freebsd.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="sdtB3X0nJg68CQEu"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200103221954.f2MJsfL01875@freefall.freebsd.org>; from sf@FreeBSD.org on Thu, Mar 22, 2001 at 11:54:41AM -0800
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 22, 2001 at 11:54:41AM -0800, FUJISHIMA Satsuki wrote:
> sf          2001/03/22 11:54:41 PST
>=20
>   Modified files:
>     games/nethack-gtk    Makefile=20
>   Log:
>   mark as BROKEN temporarily; Gtk+-1.2.9 does not allow setuid program.

FYI, if there's some way to hack around this, and nethack-gtk is only
using setgid games (not setuid anything, or setgid anything else) then
doing so should be fine.  The games gid is essentially a throwaway
group which can only damage other game score/save files, and doesn't
carry any other privileges (like the ability to overwrite binaries and
thereby trojan users).

Kris

--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6umFDWry0BWjoQKURAmS6AKCJVHf5RdDIPAYndfX4muoYpx5EWwCgwYWA
ozrh0COGUi6J1S8oQ+/dnC0=
=z14l
-----END PGP SIGNATURE-----

--sdtB3X0nJg68CQEu--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message