From owner-cvs-ports@FreeBSD.ORG  Tue Mar  2 07:54:00 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from green.homeunix.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7371716A4CE; Tue,  2 Mar 2004 07:53:59 -0800 (PST)
Received: from green.homeunix.org (green@localhost [127.0.0.1])
	by green.homeunix.org (8.12.10/8.12.9) with ESMTP id i22Frwws030306;
	Tue, 2 Mar 2004 10:53:58 -0500 (EST)
	(envelope-from green@green.homeunix.org)
Received: from localhost (green@localhost)i22Frvhr030302;
	Tue, 2 Mar 2004 10:53:57 -0500 (EST)
Message-Id: <200403021553.i22Frvhr030302@green.homeunix.org>
X-Mailer: exmh version 2.6.3 04/04/2003 with nmh-1.0.4
To: Will Andrews <will@csociety.org>
In-Reply-To: Message from Will Andrews <will@csociety.org> 
	<20040302153831.GK13724@sirius.firepipe.net> 
From: "Brian F. Feldman" <green@FreeBSD.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Tue, 02 Mar 2004 10:53:57 -0500
Sender: green@green.homeunix.org
cc: "Jacques A. Vidrine" <nectar@FreeBSD.org>
cc: Michael Nottebrock <lofi@FreeBSD.org>
cc: cvs-all@FreeBSD.org
cc: ports-committers@FreeBSD.org
cc: cvs-ports@FreeBSD.org
cc: Michael Nottebrock <michaelnottebrock@gmx.net>
Subject: Re: cvs commit: ports/audio/arts Makefile 
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Mar 2004 15:54:00 -0000

Will Andrews <will@csociety.org> wrote:
> On Tue, Mar 02, 2004 at 07:47:52AM -0600, Jacques A. Vidrine wrote:
> > P.S.  I don't mean to pick on this port in particular.  I believe there
> > are other ports that install set-user-ID binaries where it is not
> > essential.  I just haven't had a chance to make a sweep of the tree yet
> > to identify them.
> 
> I agree with Michael - I'd rather have working software than
> a false sense of security, when it comes to desktop software.
> 
> If you are going to push a "make all setuid bits optional"
> agenda, I suggest coming up with a standard means of letting the
> administrator specify their policy regarding those.  You could
> also offer alternate means of achieving the effect that set-id
> wrappers/programs intend with their privileges.
> 
> Unfortunately, in arts' case, setpriority(2) is superuser-only.
> Perhaps in FreeBSD 5, we should start implementing standard means
> of allowing programs like artsd to call setpriority(2) without
> privileges, e.g. through MAC.

Is it setpriority(2) or rtprio(2)?  The latter was implied, and it is NOT 
acceptable to have ports use rtprio(2) without consent from the system 
administrator -- and not implicit consent, either.

-- 
Brian Fundakowski Feldman                           \'[ FreeBSD ]''''''''''\
  <> green@FreeBSD.org                               \  The Power to Serve! \
 Opinions expressed are my own.                       \,,,,,,,,,,,,,,,,,,,,,,\