First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 7883
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Dan Armak (RETIRED) <danarmak@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Adrian Almenar <aalmenar@gmail.com>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 7883 depends on: Show dependency tree
Show dependency graph
Bug 7883 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)







View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2002-09-13 11:40 0000 
to make arts run in realtime i marked artsd with suid bit and arts worked  
perfectly, i had no more problems with arts.  
  
Maybe this can resolve some arts problem found on forums.gentoo.org. 
 
For more info: 
I Start X as a normal user with startx and KDE starts alone.

------- Comment #1 From SpanKY 2002-09-22 13:09:47 0000 ------- 
*** Bug 8206 has been marked as a duplicate of this bug. ***

------- Comment #2 From Dan Armak (RETIRED) 2002-09-29 04:23:48 0000 ------- 
artsd should never have the suid bit set. artswrapper should.  And when
artspwrapper does have suid, it creates a DoS possibility. I've written to
-core asking what our default policy should be - suid off by default and tell
people like you to turn it on manually, the opposite, or controlling it with
some use flag or such.

------- Comment #3 From Adrian Almenar 2002-09-29 12:48:29 0000 ------- 
Then you can close this bug, i setted artwrapper suid bit, and artds i unsetted
suid bit and it worked ok.

Thank for your help

------- Comment #4 From Dan Armak (RETIRED) 2002-10-04 03:42:50 0000 ------- 
Status update: we're probably going to use the "trusted" use flag to enable or 
disable the suit but on artswrapper by default.

------- Comment #5 From Dan Armak (RETIRED) 2002-11-23 15:20:54 0000 ------- 
Final status update: 
artsd is not suid root. (never was.) artswrapper is. A DoS attack on artswrapper is 
possible, however secure systems shuoldn't be using this default setup in the first 
place. All other non-security-oriented distros do this and it's kde's default setup, so 
I'm leaving it as-is.
First Last Prev Next    No search results available      Search page      Enter new bug