Date: Fri, 11 Aug 2000 14:39:39 -0600 From: Warner Losh <imp@village.org> To: arch@freebsd.org Cc: cvs-committers@freebsd.org Subject: Re: cvs commit: src/gnu/usr.bin/perl Makefile Message-ID: <200008112039.OAA52272@harmony.village.org> In-Reply-To: Your message of "Sat, 11 Aug 2000 22:19:51 %2B0200." <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za> References: <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
[[ followups to -arch ]] In message <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za> John Hay writes: : > Perhaps it's time to add a make.conf variable like SECURE_SUID_ROOT : > (or something) and have *all* but the most essential suid binaries : > conditionalize their installation modes from its setting. Turn it on : > or off by default, I don't really care, just make it easier to have : > things like suidperl without actually mucking with sources. : : Then we will also need its equivalent in sysinstall so that you can : decide at install time what kind of setup you want. :-) I don't think it is time to have that. We already drive to have a minimal set of setuid binaries on the system. suidperl is the largest one we have, has a history of bugs and is hard to audit and isn't that widely used. That's why I didn't want it laying around with setuid bit set on it. It is literally unique in the tree. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200008112039.OAA52272>