On 11/24/05, Lennon Cook <[EMAIL PROTECTED]> wrote:
> On 11/24/05, Luca Dionisi <[EMAIL PROTECTED]> wrote:

> > Concerning scrollkeeper, I'm not happy with having _another_ executable
> > setuid root. If this became a common scenario, someone could try and
> > find a bug in it to exploit.
> It doesn't need to be SUID root - and, indeed, it probably shouldn't
> be. Just make it SUID (or SGID, it should work just the same), and
> leave it owned by the Scrollkeeper user.

I didn't think of it. If it works it's ok.

> > My main issue is: Nautilus doesnt work. That is, wrong icons in nautilus.
> > I already did make install dirs. At the end of (near) all the installations.
> >
> > I'm wondering: is making install dirs really enough?  Do the tools used by
> > installation script to update the scrollkeeper/mime/desktop/whatsoever
> > database _only_ create new files in install dir ? Or they try to update
> > existing files? This would be a problem, I mean if these files were created
> > by other pkg-users.
> If any package tries to overwrite a file provided by another package,
> the install will fail hard.  This is one of the main benifits of the
> package user scheme. If you're worried, go back through your build
> logs.

You didn't get my point. I try to explain better.
I don't know how scrollkeeper (and icons, mime-types...) db works.
If it uses a single file for storing info concerning two or more
packages, the first who tries to create it will be the only who can
modify it. And it is no good. It is not what the pkg user approach
wants to avoid.
Also, I'm not sure that the update tool will report it as an error
and cause the installation to fail. (Again, it's because I don't know
how it works. My fault). I say this because I already went through the
logs of my build and saw nothing wrong.


> If I get a chance in the next couple of days, I will re-download and
> install Nautilus, to see if I can do a better job of tracking down the
> problem.

Many thanks and good luck!


Luca
--
http://linuxfromscratch.org/mailman/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to