emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH] Allow update-game-score to run sgid instead of suid.


From: Ulrich Mueller
Subject: Re: [PATCH] Allow update-game-score to run sgid instead of suid.
Date: Fri, 6 Feb 2015 11:35:09 +0100

>>>>> On Thu, 05 Feb 2015, Stefan Monnier wrote:

>> So, any objections against changing the default, as indicated above?

> I'm OK with changing to setgid instead of setuid, yes (I don't have
> a strong opinion either way on this).

A small problem with this is that there seems to be no portable
command to check for existence of a group. (There is getent(1) in
GNU/Linux and {Free,Open,Net}BSD but it's not specified by POSIX.)

But I guess we can set the default in configure and try to chgrp to it
during make install. It fails softly, so installation won't abort if
the group doesn't exist.

> As for defaulting to "neither setuid nor setgid", I'm less convinced.
> After all, I'd expect that most cases where Emacs is built "by hand"
> (rather than installed from a distro), the build will be done by
> a non-privileged user, so it will already end up being neither
> setgid/setuid.  IOW changing the default will end up catching distros
> by surprise with no real upside.

There's a note in etc/NEWS ... But point taken.

Ulrich



reply via email to

[Prev in Thread] Current Thread [Next in Thread]