Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-14 Thread IOhannes m zmoelnig
Miller Puckette wrote: > Aha, on the next boot it worked. Thanks! as pam is login-related, all changes to it's configuration only take effect after a fresh login. (like when you add yourself to another group, you will have to re-login in order to be really part of the group). no need for rebooti

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-14 Thread IOhannes m zmoelnig
IOhannes m zmoelnig wrote: > just for the archives i repeat the steps: > make sure, your /etc/security/limits.conf holds these 3 lines: oops, should have read the entire thread before answering. so i know that frank has already posted this (i thought that miller was probably referring to an older

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-14 Thread IOhannes m zmoelnig
Hans-Christoph Steiner wrote: > On Jul 13, 2007, at 1:43 AM, Frank Barknecht wrote: > >> Debian with libpam-modules 0.79-4. > > I wonder how to set up something like this in a package. Too bad i daresay you don't. how about adding documentation to the README that explain how to setup the /et

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Mathieu Bouchard
On Fri, 13 Jul 2007, [EMAIL PROTECTED] wrote: Pd does a "seteuid(setuid())" to un-get root priveliges if run as setuid, after its priority gets promoted, so that it runs as the user who started it. But there are apparently loopholes, as Mathieu has found. what you mean is that your pd does a

[PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Mathieu Bouchard
On Fri, 13 Jul 2007, Frank Barknecht wrote: Hans-Christoph Steiner hat gesagt: // Hans-Christoph Steiner wrote: This is only possible if you are running Pd as root, which is general is not a good idea. If Pd is running as a different user, then you wouldn't be able to gain root access. Matju

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Mathieu Bouchard
On Fri, 13 Jul 2007, Frank Barknecht wrote: Regarding patco's problem with realtime mode: "chmod +s" is not a good idea as it's a potentially big security hole opening up your system for all kind of local exploits. Frankly, on the average machine, almost all important files are in the same u

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Mathieu Bouchard
On Thu, 12 Jul 2007, Hans-Christoph Steiner wrote: This is only possible if you are running Pd as root, which is general is not a good idea. If Pd is running as a different user, then you wouldn't be able to gain root access. We are *only* talking about setuid (chmod +s) and not starting pd f

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Miller Puckette
Aha, on the next boot it worked. Thanks! Miller On Fri, Jul 13, 2007 at 07:43:10AM +0200, Frank Barknecht wrote: > Hallo, > Miller Puckette hat gesagt: // Miller Puckette wrote: > > > Pd does a "seteuid(setuid())" to un-get root priveliges if run as > > setuid, after its priority gets promoted,

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-13 Thread Hans-Christoph Steiner
On Jul 13, 2007, at 1:43 AM, Frank Barknecht wrote: > Hallo, > Miller Puckette hat gesagt: // Miller Puckette wrote: > >> Pd does a "seteuid(setuid())" to un-get root priveliges if run as >> setuid, after its priority gets promoted, so that it runs as the >> user who started it. But there are ap

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Frank Barknecht
Hallo, Miller Puckette hat gesagt: // Miller Puckette wrote: > Pd does a "seteuid(setuid())" to un-get root priveliges if run as > setuid, after its priority gets promoted, so that it runs as the > user who started it. But there are apparently loopholes, as Mathieu > has found. > > I'm trying to

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Miller Puckette
Pd does a "seteuid(setuid())" to un-get root priveliges if run as setuid, after its priority gets promoted, so that it runs as the user who started it. But there are apparently loopholes, as Mathieu has found. I'm trying to repeat Frank's trick with /etc/security/limits.conf, so far without succe

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Hans-Christoph Steiner
On Jul 12, 2007, at 6:52 PM, Frank Barknecht wrote: > Hallo, > Hans-Christoph Steiner hat gesagt: // Hans-Christoph Steiner wrote: > >> On Jul 12, 2007, at 3:18 PM, Mathieu Bouchard wrote: >> >>> Last year I demonstrated that it is possible to make a very small >>> external that gives root access

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Patco
Hello! Frank Barknecht a écrit : > Hallo, > Hans-Christoph Steiner hat gesagt: // Hans-Christoph Steiner wrote: > > >> On Jul 12, 2007, at 2:45 PM, Georg Holzmann wrote: >> >> >>> Hallo! >>> >>> the other thing is only related to my setup i guess. i would like to know if a

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Frank Barknecht
Hallo, Hans-Christoph Steiner hat gesagt: // Hans-Christoph Steiner wrote: > On Jul 12, 2007, at 3:18 PM, Mathieu Bouchard wrote: > > > Last year I demonstrated that it is possible to make a very small > > external that gives root access to the whole pd process. This > > vulnerability only af

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Frank Barknecht
Hallo, Hans-Christoph Steiner hat gesagt: // Hans-Christoph Steiner wrote: > On Jul 12, 2007, at 2:45 PM, Georg Holzmann wrote: > > > Hallo! > > > >> the other thing is only related to my setup i guess. i would like to > >> know if anyone experience this. if i don't chmod +s /usr/local/bin/pd > >

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread patrick
ECTED]> To: "patrick" <[EMAIL PROTECTED]> Cc: "Pd" Sent: Thursday, July 12, 2007 5:11 PM Subject: Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu > > Hmm... setuid root by default on Pd is kind of scary. It's very far from > secure. I wonder if ther

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Hans-Christoph Steiner
setuid > to avoid > the glitches. > > pat > > > - Original Message - > From: "Georg Holzmann" <[EMAIL PROTECTED]> > To: "patrick" <[EMAIL PROTECTED]> > Cc: "Pd" > Sent: Thursday, July 12, 2007 2:45 PM > Subject

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Hans-Christoph Steiner
On Jul 12, 2007, at 2:45 PM, Georg Holzmann wrote: > Hallo! > >> the other thing is only related to my setup i guess. i would like to >> know if anyone experience this. if i don't chmod +s /usr/local/bin/pd >> then i have many glitches in pd (xruns). i am using ubuntu studio >> (feisty) with the

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Hans-Christoph Steiner
On Jul 12, 2007, at 3:18 PM, Mathieu Bouchard wrote: > On Thu, 12 Jul 2007, [EMAIL PROTECTED] wrote: > >> would it be possible to add an option to ask the user if he wants >> to chmod +s pd? some people told me it's dangerous. is it really? >> pd is already a powerful (read dangerous) softwar

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread patrick
, 2007 2:45 PM Subject: Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu > Hallo! > >> the other thing is only related to my setup i guess. i would like to >> know if anyone experience this. if i don't chmod +s /usr/local/bin/pd >> then i have many glitches in pd (xruns).

[PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Mathieu Bouchard
On Thu, 12 Jul 2007, [EMAIL PROTECTED] wrote: would it be possible to add an option to ask the user if he wants to chmod +s pd? some people told me it's dangerous. is it really? pd is already a powerful (read dangerous) software with the objet system, shell or netreceive... Last year I demon

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Georg Holzmann
Hallo! > the other thing is only related to my setup i guess. i would like to > know if anyone experience this. if i don't chmod +s /usr/local/bin/pd > then i have many glitches in pd (xruns). i am using ubuntu studio > (feisty) with the realtime kernel. are you starting with pd -rt ? LG Geor

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread patrick
hi hans, it's working well, but 2 things: in About pd the version is Pd version 0.39.2-extended-rc5 but the file we downloaded is rc4. the other thing is only related to my setup i guess. i would like to know if anyone experience this. if i don't chmod +s /usr/local/bin/pd then i have many gl

Re: [PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-12 Thread Hans-Christoph Steiner
Oops, sorry about that, try downloading it again and installing it. I set the arch and tested it. .hc On Jul 11, 2007, at 12:14 AM, patrick wrote: > hi hans, > > on ubuntu feisty there's an error with this release: > Debian and Ubuntu, Intel i386 > > Package Installer complains about the Sta

[PD] Pd-0.39.2-extended-rc4 released on ubuntu

2007-07-10 Thread patrick
hi hans, on ubuntu feisty there's an error with this release: Debian and Ubuntu, Intel i386 Package Installer complains about the Status: Error: Wrong architecture 'any' or using terminal: dpkg -i Pd-0.39.2-extended-rc4-debian-stable-i386.deb dpkg: error processing Pd-0.39.2-extended-rc4-debian