OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: pretendroot

From: Han Boetes (hanmijncomputer.nl)
Date: Fri Jan 02 2004 - 03:16:34 CST


Nikolay Sturm wrote:
> * Han Boetes [2004-01-02]:
> > For users yes. For packagers no. Some packages install in / instead
> > of in the fakedir. And that's what this library prevents because you
> > don't get real root-permissions.
>
> For the record, this is only true for people creating a new port of
> misbehaving software.

That's what I just said.

> > To prevent this using systrace has been used but IMHO that was not
> > such a great success.
>
> Huh? All my local builds are systrace'd, except for those <10 ports
> that have problems. Whenever I test new ports, they are systrace'd and
> several bugs where and are found this way. Your point being?

It never worked for me. Hmm just tested it. It works ok now. Ok this makes my
request rather useless.

For the people who wonder what the fuss is all about: If you ever want to
create a new port put:

  USE_SYSTRACE= Yes

in /etc/mk.conf

> > Perhaps it is possible to solve this problem in another way, for
> > examples a packager-fake-install target which ignores the chmod
> > calls, so you can at least make sure the fake target installs in the
> > right location.
>
> How is this supposed to work if all that fake does, is call "make
> install" in WRKSRC? What would it change?

I meant chown/chgrp. And disabling sudocalls. Sorry for misformulation.

# Han
--
http://www.xs4all.nl/~hanb/software
http://www.xs4all.nl/~hanb/documents/quotingguide.html