[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Bad configure check

From: Colin Walters
Subject: Re: Bad configure check
Date: 26 Apr 2002 15:28:48 -0400

On Fri, 2002-04-26 at 13:38, Richard Stallman wrote:

> You could always use try using chown when installing
> update-game-score.  If it fails, don't make it setuid.
> When a game runs, it can check at run-time whether the program is
> setuid, and act accordingly.

The tricky thing about this is that update-game-score.c gets compiled
with different options depending on whether or not we have access to a
shared game directory.

If update-game-score is setuid, it must always store scores in the
shared game directory; anything else would be a security problem.  If
it's not setuid, then we store scores in the user's home directory.

Hmmm.  I suppose we can solve this problem by making update-game-score
itself check whether it's setuid, and then do the right thing
accordingly...I will investigate doing this.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]