OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: pretendroot

From: Han Boetes (hanmijncomputer.nl)
Date: Thu Jan 01 2004 - 22:41:33 CST


Jose Nazario wrote:
> at least from the description, i prefer how sudo does this, instead. and
> its built into our framework.

For users yes. For packagers no. Some packages install in / instead of in the
fakedir. And that's what this library prevents because you don't get real
root-permissions.
To prevent this using systrace has been used but IMHO that was not such a great
success.
Perhaps it is possible to solve this problem in another way, for examples a
packager-fake-install target which ignores the chmod calls, so you can at least
make sure the fake target installs in the right location.

# Han
--
http://www.xs4all.nl/~hanb/software
http://www.xs4all.nl/~hanb/documents/quotingguide.html