Re: [PATCH] gnu: aegis: New variable.

[John Darrington]

On Fri, Jul 18, 2014 at 02:42:38PM +0200, Ludovic Court??s wrote:
     John Darrington <address@hidden> skribis:
     
     > I see (I think).  Could we at least arrange for a message to be emitted 
on 
     > package --install suggesting that the package be added to 
setuid-programs?
     > Aegis is useless without setuid-root.
     
     I suppose aegis itself emits such a message, no?
     
Yes and no.

The message it emits is :

 aegis: There was no -LIBrary option specified.  This is mandatory in "test" 
mode.

An experienced person knows that to get out of "test" mode, you need to 
install it setuid root.  But I suggest that less experienced persons would not.

Arguably this is deficiency of aegis itself.   Their counter-argument would 
probably be that if we choose not to install it the way described in the docs,
then we must be prepared to deal with the consequences.

J'

-- 
PGP Public key ID: 1024D/2DE827B3 
fingerprint = 8797 A26D 0854 2EAB 0285  A290 8A67 719C 2DE8 27B3
See http://sks-keyservers.net or any PGP keyserver for public key.

signature.asc
Description: Digital signature