Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 53877 - support USE flag for suid files in baselayout
Summary: support USE flag for suid files in baselayout
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-06-14 03:32 UTC by Vincent de Phily
Modified: 2004-06-14 07:41 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Implement optional suid for halt in baselayout (baselayout-1.9.4-r2_haltsuid.patch,725 bytes, patch)
2004-06-14 04:26 UTC, Peter Jensen
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Vincent de Phily 2004-06-14 03:32:48 UTC
I always "chmod +s /sbin/reboot /sbin/halt" after emerging baselayout.
I guess I'm not the only one, and a USE flag for this would be a good idea ? Of course you'd want to set a specific user group that is allowed to do that.

Reproducible: Always
Steps to Reproduce:
run /sbin/halt as ordinary user
Actual Results:  
"halt: must be superuser."

Expected Results:  
system halt
Comment 1 Peter Jensen 2004-06-14 04:24:57 UTC
Now that you mention it, I have wanted that option for quite some time.
It would seem right to have the binaries executable only by root and members of the wheel group.
This could be implemented like the artswrappersuid flag for arts.
Comment 2 Peter Jensen 2004-06-14 04:26:44 UTC
Created attachment 33205 [details, diff]
Implement optional suid for halt in baselayout

Try out this patch against baselayout-1.9.4-r2.
Comment 3 Carsten Lohrke (RETIRED) gentoo-dev 2004-06-14 06:51:49 UTC
Why don't you allow users to execute these binaries by adding them to /etc/sudoers? I vote against adding a suid use flag for all and everything.
Comment 4 Aron Griffis (RETIRED) gentoo-dev 2004-06-14 07:41:10 UTC
Thanks for the suggestion.  I am not willing to add this USE flag since it serves no purpose.  sudo provides a manageable way of providing this functionality with better security.  emerge sudo and man sudoers