But that means we have to add all permission since all are configurable.
Isn't it a better idea to save the standard setting only for those
programs that are setuid by default?

Michael

--
Dr. Michael Meskes, Projekt-Manager    | topsystem Systemhaus GmbH
[EMAIL PROTECTED]                    | Europark A2, Adenauerstr. 20
[EMAIL PROTECTED]                      | 52146 Wuerselen
Go SF49ers! Go Rhein Fire!             | Tel: (+49) 2405/4670-44
Use Debian GNU/Linux!                  | Fax: (+49) 2405/4670-10

>-----Original Message-----
>From:  Christoph Lameter [SMTP:[EMAIL PROTECTED]
>Sent:  Monday, June 23, 1997 5:45 PM
>To:    debian-devel@lists.debian.org
>Cc:    Die Adresse des Empfängers ist unbekannt.
>Subject:       Re: Use of suidmanager
>
>In article <[EMAIL PROTECTED]> you wrote:
>: Could anyone please tell me the advantages of suidmanager as it is right
>: now? I can see the usefullness of a tool like that, but I wonder if there
>: should be a daily test run to make sure no other file are suid. Or is this
>: dones elsewhere?
>
>Not all packages use suidmanager and thus the list in /etc/suid.conf is
>not complete.
>
>: Also why are there file in /etc/suid.conf that are not suid at all:
>
>: debmake /usr/bin/build root root 755
>: debmake /usr/bin/debpkg root root 755
>
>Suidmanager manages configurable permissions in general not only suid
>permissions.
>These binaries can be made suid. For example on my system:
>
>user /usr/bin/build root wheel 4754
>user /usr/bin/debpkg root wheel 4754
>
>I dont need sudo or other contraptions to build packages. More in
>/usr/doc/debmake. I can just type "build" and a packages goes through
>the complete build process.
>
>-- 
>--- +++ --- +++ --- +++ --- +++ --- +++ --- +++ --- +++ ---
>Please always CC me when replying to posts on mailing lists.
>
>
>--
>TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
>[EMAIL PROTECTED] . 
>Trouble?  e-mail to [EMAIL PROTECTED] .
>


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] .
Trouble?  e-mail to [EMAIL PROTECTED] .

Reply via email to