Re: avoid running CPAN as root

2010-01-13 Thread Paul LeoNerd Evans
On Tue, 12 Jan 2010 17:14:03 + Andy Armstrong a...@hexten.net wrote: On 12 Jan 2010, at 16:59, dhu...@hudes.org wrote: While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time Do they? I've got 1213

Re: avoid running CPAN as root

2010-01-13 Thread David Cantrell
On Tue, Jan 12, 2010 at 05:23:32PM +, Dana Hudes wrote: Rebuilding a few hundred modules will take more than 15 minutes, especially if you have to download each one. I suppose you could modify sudoes to make it 8 hours. The grace period gets reset every time sudo is invoked, so even if

Re: avoid running CPAN as root

2010-01-12 Thread Eric Wilhelm
# from Shawn H Corey # on Sunday 10 January 2010 08:11: $ sudo cpan This exposes your system to any bugs in the test suite (an accidental `rm -rf /` has happened before) with root privileges. With a modern CPAN client, you can set it to use sudo only at install time with the

Re: avoid running CPAN as root

2010-01-12 Thread dhudes
While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time 2. Far more impact is that sudo requires that you enter your password each time you invoke it. Therefore you will have to enter your password once for each

Re: avoid running CPAN as root

2010-01-12 Thread Andy Armstrong
On 12 Jan 2010, at 16:59, dhu...@hudes.org wrote: While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time Do they? I've got 1213 distributions installed on this laptop. All using cpan and none of them required

Re: avoid running CPAN as root

2010-01-12 Thread Martin Evans
dhu...@hudes.org wrote: While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time 2. Far more impact is that sudo requires that you enter your password each time you invoke it. Therefore you will have to enter

Re: avoid running CPAN as root

2010-01-12 Thread Andy Armstrong
On 12 Jan 2010, at 17:23, Dana Hudes wrote: Rebuilding a few hundred modules will take more than 15 minutes, especially if you have to download each one. I suppose you could modify sudoes to make it 8 hours. The timeout is reset each time sudo is used - so a shorter timeout is usually OK.

Re: avoid running CPAN as root

2010-01-12 Thread Smylers
Andy Armstrong writes: On 12 Jan 2010, at 16:59, dhu...@hudes.org wrote: sudo requires that you enter your password each time you invoke it. Often sudo will be configured with a 15 minute grace period which means you only need to authenticate for the first make install / ./Build

Re: avoid running CPAN as root

2010-01-12 Thread David Cantrell
On Tue, Jan 12, 2010 at 08:59:46AM -0800, dhu...@hudes.org wrote: While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time This is true. Have a look to see if CPAN distprefs will let you temporarily override the

Re: avoid running CPAN as root

2010-01-12 Thread Austin Schutz
Smylers wrote: Andy Armstrong writes: On 12 Jan 2010, at 16:59, dhu...@hudes.org wrote: sudo requires that you enter your password each time you invoke it. Often sudo will be configured with a 15 minute grace period which means you only need to authenticate for the first make install /

Re: avoid running CPAN as root

2010-01-12 Thread Eric Wilhelm
# from Austin Schutz # on Tuesday 12 January 2010 10:08: Seems like it would be nice if the build system understood appropriate behavior for the root user and acted accordingly. That is:  given superuser access privileges should be lowered by default during the build process, but elevated for

Re: avoid running CPAN as root

2010-01-12 Thread Hans Dieter Pearcey
Excerpts from dhudes's message of Tue Jan 12 11:59:46 -0500 2010: 2. Far more impact is that sudo requires that you enter your password each time you invoke it. No it doesn't. Read sudo(8). By default, you only have to enter it once every 15 minutes. hdp.

Re: avoid running CPAN as root

2010-01-12 Thread Dana Hudes
, 2010 12:14 PM Subject: Re: avoid running CPAN as root On 12 Jan 2010, at 16:59, dhu...@hudes.org wrote: While the idea of using sudo only at install time is nice, there are two problems: 1. Some modules require extra privileges at test time Do they? I've got 1213 distributions installed

Re: avoid running CPAN as root

2010-01-12 Thread Shawn H Corey
Dana Hudes wrote: Rebuilding a few hundred modules will take more than 15 minutes, especially if you have to download each one. I suppose you could modify sudoes to make it 8 hours. Once you start cpan with sudo, it will continue to run until you quit. Any program started with sudo runs as