-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/31/2012 01:44 AM, Walter Dnes wrote: > Moving USE flags from local to global status is frequently discussed > here, so this seems to be the right forum to raise the issue... > > [d531][waltdnes][~] grep suid /usr/portage/profiles/use.desc > suid - Enable setuid root program, with potential security risks > > [d531][waltdnes][~] grep :suid /usr/portage/profiles/use.local.desc > net-analyzer/nagios-plugins:suid - Give root privileges to the ICMP, DHCP and > IDE S.M.A.R.T. check binaries. This allows them to ignore the access controls > that would disallow the nagios user from running the check. > net-wireless/kismet:suid - Install a setuid root helper binary with limited > functionality; this allows running kismet as a normal user, significantly > reducing security risks > Just because it's a global use flag doesn't mean you cannot redefine it locally to more specifically define the use case in a particular package. That's clearly what is done for kismet here, I have no desire to undefine it and make what happens less clear.
- -Zero > BTW, I would've appreciated a headsup (news item) on Xorg getting the > "suid" USE flag. I use startx, and I couldn't start X <G>. Fortunately, > that was on my netbook, and I was able to Google the solution on my > desktop machine... http://en.spontex.org/forum/thread/561/1/ I'm > posting a heads up on the user list. > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBAgAGBQJQ4dAuAAoJEKXdFCfdEflKJW0P/0uP17fkn9h+3n+OZTi4B74G wjQmGYZ1+uAKZwluUY/4BUR6l03f+ayqQATzxTQyuNjaf0LwHTVvWHCuC0HlrJM2 77dWCHE7d9SYDM1uUIyxJHFUtD1OOyrUcsC9+biHk2asVnhMhegR8wvS/iqyHxao TiWUjXGQk12jMrMg6cIs1UPprAutLFuDX+JQFoIPew18bFw6fUQVsIcxn3OwjPzQ roxDJ+sLmqrs5hZcZ2BhD13o40uZFe75UtshnGBhMseZ/HRCiCy9ABZiPpcQTy8f 9APXR2APt00CT3rjo2I6iGfqHS09ZfNET9VfcoQZ0GlVuzWk9CxMwKC2tLJazmnz uY3dx/A86ej664mq2WyzTAqUZqcK3nnaENoH/YiNqjI49q3+m98twzD4rusUJG+n EjGCItcj6uRckV2KBE3dOpuooK8kUNLjAQ1+I4AtX8tZprCwkdgH48UINy19uBB0 hwdyeYFBXVPcuk9bMgB0yxnR62JkS/3Txcn1AyxktbsBsEIGmmJrPAuZMv2LIaDp U1vp/PC+49GbU4U3IIWXfuvdueQaZsiWhDDUUjRpeQ8dm+IxWfQcyBFHtW+DO17t nNsMNnpmE4721+sQJDa/l/rbca8UNK39pcmVcGjJ/KzkOr3F8Yj6eV7OWows2jNd 3/OkrdiT/rUUsJy8ZQRs =E8id -----END PGP SIGNATURE-----
