Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Han-Wen Nienhuys
[EMAIL PROTECTED] writes: > > On 4-Mar-05, at 11:33 AM, Han-Wen Nienhuys wrote: > > don't use the TeX backend. Starting with 2.6 (release will be > > soonish), this backend is not officially endorsed anymore. > > Does that change anything for lilypond-book? No, not really. lilypond-book now sim

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Graham Percival
On 4-Mar-05, at 11:33 AM, Han-Wen Nienhuys wrote: don't use the TeX backend. Starting with 2.6 (release will be soonish), this backend is not officially endorsed anymore. Does that change anything for lilypond-book? - Graham ___ lilypond-devel mailing li

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Han-Wen Nienhuys
[EMAIL PROTECTED] writes: >exit (2); > } > > + /* Now we chroot, setuid/setgrp and chdir. If something goes wrong, we > exit (this is a > + security-sensitive area). */ > + > + /* We must retrieve the user/group id *before* chroot'ing! */ > + int uid, gid; Style nitpicks:

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Han-Wen Nienhuys
[EMAIL PROTECTED] writes: > Whoops, I forgot one important aspect. > > Presently, the whole thing works for compiling *with the --tex option*. > I have not yet explored the possibility of having a larger set of the > compilation process carried out, but this seems to me a minor problem, > as I thi

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Sebastiano Vigna
Whoops, I forgot one important aspect. Presently, the whole thing works for compiling *with the --tex option*. I have not yet explored the possibility of having a larger set of the compilation process carried out, but this seems to me a minor problem, as I think it is always possible to run the ot

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Paul Jarc
Sebastiano Vigna <[EMAIL PROTECTED]> wrote: > I think this is a satisfactory solution for people wanting to run lily > on a server, with greater freedom than that provided by safe mode. I agree - privilege limitations are already well covered and enforced by the kernel. Better to reuse that well-

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Sebastiano Vigna
Dear developers, I think I found a reasonable solution. I'm including a patch for main.cc against the current stable release (2.4.4). It adds new options --set-user ('u') --set-group ('g') --chroot ('r') --chdir ('d') that allow one to first chroot, then setuid/setgrp, and finally chdir. Using

Quarter-tones in deutsch.ly

2005-03-04 Thread Arno Waschk
May I ask whether this patch might be the desired way to add quarter-tone pitchnames to deutsch.ly? I know it is not complete, but is already helpful for me. I can completeit later, or do it another way if somebody hints me how to do it. Thanks, Arno -- http://www.arnowaschk.de deutsch.patc

Re: chroot/setuid for lilypond (for LSR)

2005-03-04 Thread Sebastiano Vigna
On Sat, 2005-02-26 at 13:40 +0100, Han-Wen Nienhuys wrote: > There is a RPM spec in the tarball > (make/out/lilypond.fedora.spec). Due to GS issues, building the doc > rpm doesn't work, but building the base program does > Apparently the packager forgot to include a build dependency on fontforge