Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-28 Thread Hynek Hanke
Jan Buchal napsal(a): > HG> Hi, What is the need for speech-dispatcher to run as root? Is it > HG> possible to run it as non-root? We need to modify the > HG> speechd.conf files from a non-root program and as such run the > HG> speech-dispatcher daemon with non-root privileges. > Su

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-21 Thread Jan Buchal
> "HG" == Hemant Goyal <[EMAIL PROTECTED]> writes: HG> Hi, What is the need for speech-dispatcher to run as root? Is it HG> possible to run it as non-root? We need to modify the HG> speechd.conf files from a non-root program and as such run the HG> speech-dispatcher daemon with

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-20 Thread Hemant Goyal
Hi James, The point I was trying to make was that the Sugar API itself could have > removed the burden of setting these options from the developer. > Yes that is indeed what is happening :). And there is no API call involved whatsoeverl with the present design :). Perhaps once the code is release

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-18 Thread Tim Cross
> > P.S. - In the long run, speechd should probably learn to run under its > own uid(s). Then the appropriate uids can own the appropriate log files. > I agree with Michael here. If you look at some of the files in /var/run and /var/log, you will see that some of them are owned by a specific use

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-18 Thread James Simmons
Hemant, The point I was trying to make was that the Sugar API itself could have removed the burden of setting these options from the developer. An Activity, with just one line of code, could have set his speech client to the default values. An Activity could also, using the API, find out wh

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-18 Thread Hemant Goyal
Hi, Thanks all for your inputs :) I managed to make speech-dispatcher as non-root using /tmp/speechd.pid and relocating the log files that were being written to /home/olpc/.speechd/. Since I started speech-dispatcher through the user olpc the log files need to be in a ~/ of olpc. @James: > I ha

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-17 Thread Michael Stone
On Thu, Jul 17, 2008 at 05:21:57PM +0530, Hemant Goyal wrote: >The corresponding strace outputs are : >open("/var/log//speechd.log", O_WRONLY|O_CREAT|O_APPEND, 0666) = -1 EACCES >(Permission denied) >open("/var/log//espeak.log", O_WRONLY|O_CREAT|O_TRUNC, 0600) = -1 EACCES >(Permission denied) Y

Re: running speech-dispatcher as non-root using setuid on XO

2008-07-17 Thread James Simmons
Hemant, I have some experience using speech-dispatcher and it seems to me that the XO really doesn't need to run speech-dispatcher any differently than any other computer does (other than getting rid of unnecessary dependencies of course). My understanding of what you want to do is that you wa

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-17 Thread Hemant Goyal
Hi James, > It is like putting a hole through a city wall into a house which is > built against the wall, and then telling the city guards to stand > outside the house as well as the city gate. > > Practical, very handy, but extends the safety barrier to include the > setuid program code. > > It m

Re: running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-17 Thread James Cameron
On Thu, Jul 17, 2008 at 04:04:05PM +0530, Hemant Goyal wrote: > However, I would like to ask whether using setuid is advisable in the > OLPC laptop from a security point of view? It is like putting a hole through a city wall into a house which is built against the wall, and then telling the city g

running speech-dispatcher as non-root using setuid on XO and accompanying security issues

2008-07-17 Thread Hemant Goyal
Hi, What is the need for speech-dispatcher to run as root? Is it possible to run it as non-root? We need to modify the speechd.conf files from a non-root program and as such run the speech-dispatcher daemon with non-root privileges. To solve the above problem I applied the setuid bits to the spee