URL: <http://savannah.gnu.org/bugs/?func=detailitem&item_id=13730>
Summary: cons.saver lacking privileges Project: GNU Midnight Commander Submitted by: ossi Submitted on: Mon 07/11/2005 at 16:35 Category: Subshell Severity: 3 - Normal Status: None Privacy: Public Assigned to: None Open/Closed: Open Release: current (CVS or snapshot) Platform Version: GNU/Linux _______________________________________________________ Details: this has been discussed to death already, but i've seen no viable solution so far, only hack suggestions and general paranoia. the problem is, that "classical" 'configure && make && su -c make install' installations from upstream source have a non-working cons.saver, because it lacks access to /dev/vcsa?. the preferred solution is having a vcsa group which /dev/vcsa? belong to and to which cons.saver is set-gid. however, there is no portable way across linux distros to accomplish this. the pragmatic solution is just having cons.saver set-uid root and leaving potentially safer variants to distro-specific packages, like many other applications in the same situation do. after a security audit of the really small cons.saver source this variant should be perfectly applicable. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/bugs/?func=detailitem&item_id=13730> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ _______________________________________________ Mc-devel mailing list http://mail.gnome.org/mailman/listinfo/mc-devel