Can anyone make a wiki page about this on http://puredata.org/docs ? It would be quite handy to have.
Also, I'd love to hear suggestions how to make this part of the Pd- extended package. I think it makes a lot of sense to have this a debconf question. I suppose setuid could be a debconf question as well. .hc On Jul 13, 2007, at 12:32 PM, Miller Puckette wrote: > Aha, on the next boot it worked. Thanks! > > Miller > > On Fri, Jul 13, 2007 at 07:43:10AM +0200, Frank Barknecht wrote: >> Hallo, >> Miller Puckette hat gesagt: // Miller Puckette wrote: >> >>> Pd does a "seteuid(setuid())" to un-get root priveliges if run as >>> setuid, after its priority gets promoted, so that it runs as the >>> user who started it. But there are apparently loopholes, as Mathieu >>> has found. >>> >>> I'm trying to repeat Frank's trick with /etc/security/ >>> limits.conf, so >>> far without success, but if that works it would be much preferable >>> to making Pd setuid root. >> >> Here it works for several months at least: >> >> (~)-$ ls -l /usr/bin/pd >> -rwxr-xr-x 1 root root 809768 May 31 19:05 /usr/bin/pd >> (~)-$ /usr/bin/pd -rt >> priority 8 scheduling enabled. >> priority 6 scheduling enabled. >> >> Debian with libpam-modules 0.79-4. >> >> Ciao >> -- >> Frank Barknecht _ ______footils.org_ __goto10.org__ >> >> _______________________________________________ >> PD-list@iem.at mailing list >> UNSUBSCRIBE and account-management -> http://lists.puredata.info/ >> listinfo/pd-list > > _______________________________________________ > PD-list@iem.at mailing list > UNSUBSCRIBE and account-management -> http://lists.puredata.info/ > listinfo/pd-list ------------------------------------------------------------------------ ---- "[W]e have invented the technology to eliminate scarcity, but we are deliberately throwing it away to benefit those who profit from scarcity." -John Gilmore _______________________________________________ PD-list@iem.at mailing list UNSUBSCRIBE and account-management -> http://lists.puredata.info/listinfo/pd-list