Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Mar 2001 12:32:03 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        FUJISHIMA Satsuki <sf@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: ports/games/nethack-gtk Makefile
Message-ID:  <20010322123203.A7023@xor.obsecurity.org>
In-Reply-To: <200103221954.f2MJsfL01875@freefall.freebsd.org>; from sf@FreeBSD.org on Thu, Mar 22, 2001 at 11:54:41AM -0800
References:  <200103221954.f2MJsfL01875@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 22, 2001 at 11:54:41AM -0800, FUJISHIMA Satsuki wrote:
> sf          2001/03/22 11:54:41 PST
>=20
>   Modified files:
>     games/nethack-gtk    Makefile=20
>   Log:
>   mark as BROKEN temporarily; Gtk+-1.2.9 does not allow setuid program.

FYI, if there's some way to hack around this, and nethack-gtk is only
using setgid games (not setuid anything, or setgid anything else) then
doing so should be fine.  The games gid is essentially a throwaway
group which can only damage other game score/save files, and doesn't
carry any other privileges (like the ability to overwrite binaries and
thereby trojan users).

Kris

--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6umFDWry0BWjoQKURAmS6AKCJVHf5RdDIPAYndfX4muoYpx5EWwCgwYWA
ozrh0COGUi6J1S8oQ+/dnC0=
=z14l
-----END PGP SIGNATURE-----

--sdtB3X0nJg68CQEu--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010322123203.A7023>