Skip to Content.
Sympa Menu

sm-sorcery-bugs - [SM-Sorcery-Bugs] [Bug 10865] Security error message in sorcery ?

sm-sorcery-bugs AT lists.ibiblio.org

Subject: Bugs for Sorcery are reported here

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-sorcery-bugs AT lists.ibiblio.org
  • Subject: [SM-Sorcery-Bugs] [Bug 10865] Security error message in sorcery ?
  • Date: 6 Apr 2006 18:15:00 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=10865





------- Additional Comments From acedit AT armory.com 2006-04-06 13:15 -------
I've never heard of anyone setting find to only be executable by root, but
I'll
take your word for it that it isnt unusual. None of the admins where I work
have
ever heard of that though (some of them have been doing sys-admin work for 20+
years).

In anycase I dont want to tell you how to run your box, but one suggestion I
have is to setup a privleged group that your normal non-root account is in.
Then
have find, locate, etc. be in owned by that group and executable. Then the
users
you're keeping find and locate from still cannot access them, but you dont
have
to be root. The admins I spoke with said thats what they've seen done in the
past (freebsd for example comes with a 'wheel' group that serves this
purpose).

Certain gaze sub-commands also run find, and gaze does not require root
privleges. So your troubles may extend beyond just a message at script
startup.
Also, in the not so distant future cast may have privlege seperation and parts
of the build will run as non-root users.

I could do a patch job and suppress the error at startup, but you may have
much
larger issues down the road I figure I should warn you about. Find is part of
basesystem, and sorcery's contract with the system its running on is that the
basesystem binaries are installed and usable.


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




Archive powered by MHonArc 2.6.24.

Top of Page