From owner-cvs-ports@FreeBSD.ORG Tue Mar 2 09:50:50 2004 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9AAB16A4CE; Tue, 2 Mar 2004 09:50:50 -0800 (PST) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8024D43D1D; Tue, 2 Mar 2004 09:50:50 -0800 (PST) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 01E835482B; Tue, 2 Mar 2004 11:50:50 -0600 (CST) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 88902-04; Tue, 2 Mar 2004 11:50:39 -0600 (CST) Received: from lum.celabo.org (n00.bcrtfl01.us.wh.nameservers.net [208.55.254.110]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "lum.celabo.org", Issuer "celabo.org CA" (verified OK)) by gw.celabo.org (Postfix) with ESMTP id 352EB5487F; Tue, 2 Mar 2004 11:50:39 -0600 (CST) Received: by lum.celabo.org (Postfix, from userid 501) id 285CE10CC19; Tue, 2 Mar 2004 11:50:29 -0600 (CST) Date: Tue, 2 Mar 2004 11:50:29 -0600 From: "Jacques A. Vidrine" To: Will Andrews Message-ID: <20040302175028.GC1377@lum.celabo.org> References: <200402072116.i17LGmkA007339@repoman.freebsd.org> <20040301212624.GF8957@lum.celabo.org> <200403020912.29657.michaelnottebrock@gmx.net> <20040302134752.GB678@lum.celabo.org> <20040302153831.GK13724@sirius.firepipe.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040302153831.GK13724@sirius.firepipe.net> User-Agent: Mutt/1.4.1i X-Url: http://www.celabo.org/ cc: cvs-ports@freebsd.org cc: cvs-all@freebsd.org cc: Michael Nottebrock cc: Michael Nottebrock cc: ports-committers@freebsd.org Subject: Re: cvs commit: ports/audio/arts Makefile X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Mar 2004 17:50:50 -0000 On Tue, Mar 02, 2004 at 10:38:31AM -0500, Will Andrews wrote: > On Tue, Mar 02, 2004 at 07:47:52AM -0600, Jacques A. Vidrine wrote: > > P.S. I don't mean to pick on this port in particular. I believe there > > are other ports that install set-user-ID binaries where it is not > > essential. I just haven't had a chance to make a sweep of the tree yet > > to identify them. > > I agree with Michael - I'd rather have working software than > a false sense of security, when it comes to desktop software. > > If you are going to push a "make all setuid bits optional" > agenda, I have no intention. However, for ports that do not require the set-user-ID bit in order to function (and this is demonstrably true with arts), I would like not to install with set-user-ID by default. > I suggest coming up with a standard means of letting the > administrator specify their policy regarding those. You could > also offer alternate means of achieving the effect that set-id > wrappers/programs intend with their privileges. > > Unfortunately, in arts' case, setpriority(2) is superuser-only. > Perhaps in FreeBSD 5, we should start implementing standard means > of allowing programs like artsd to call setpriority(2) without > privileges, e.g. through MAC. Yes, we should follow up on these thoughts. Cheers, -- Jacques Vidrine / nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org