On Mon, Oct 19, 2026 at 09:48:46AM +0100, Stuart Henderson wrote: > On 2026/10/18 23:18, Laurence Tratt wrote: > > Hello ports, > > > > I just updated my packages and since last week something has changed for > > gkrellm which now terminates on start with: > > > > /usr/local/bin/gkrellm: not supposed to be setgid, aborting > > > > I must admit that I didn't know it's setgid but it really is: > > > > $ ls -lh /usr/local/bin/gkrellm > > -rwxr-sr-x 1 root kmem 1.2M Oct 17 16:03 /usr/local/bin/gkrellm > > > > Whether _all_ of gkrellm needs `kmem` levels of privilege or not, I don't > > know. But, presumably, either gkrellm will need fixing for (what I presume > > are) new security arrangements, or perhaps it can't be fixed? > > > > > > Laurie > > > > Given the changes in patches/patch-src_sysdeps_openbsd_c, as far as the > main gkrellm port goes, it seems to only be used for the TCP connection > info seen in sysdeps/bsd-net-open.c which is probably not a good enough > reason to keep it sgid kmem.
There is no reason to use kmem for getting TCP connection info. It seems that code is very old. > I haven't looked into plugins though. Almost everything in OpenBSD can be fetched through other ways (sysctl) nowadays. Nothing in base uses that anymore. > I think we should remove the sgid bit and see if anyone complains. Most certainly. -- :wq Claudio
