Re: [kde-linux] KDESU again

On 12/21/2011 05:12 PM, Duncan wrote:
James Tyrer posted on Wed, 21 Dec 2011 15:36:40 -0700 as excerpted:

Some time ago, I posted:

"When I run KDESU from a Konsole, I get this message:

startApp: Daemon not safe (not sgid), not using it

Is there some file that needs the permissions changed?"

It was posted to LFS that it is: "kdesud" that needs the permissions
changed -- SGID set.

Also note that for security reasons that the group should be changed
from "root" to "nobody".

FWIW, I can confirm here on gentoo, /usr/lib64/kde4/libexec/kdesud is
part of the kdesu package (4.7.90 installed), and that it's setGID, owner
root, group "nogroup" (probably "nobody" on LFS).

I don't see any special set* treatment in the ebuild, so it would appear
to be set by the build process from upstream (kde).

But my normal/kde user is locked out of things like su, and thus kdesu,
so I can't confirm whether it actually works or not.

IIUC, some distros name the private group for the user: "nobody" as "nogroup" rather than also calling it: "nobody". No real difference since it is still 99. So, I renamed it.

There does appears to be an issue since it is not installed this way when you build from source.

--
James Tyrer

Linux (mostly) From Scratch
___________________________________________________
This message is from the kde-linux mailing list.
Account management: https://mail.kde.org/mailman/listinfo/kde-linux.
Archives: http://lists.kde.org/.
More info: http://www.kde.org/faq.html.

Relevant Pages

  • Re: [kde-linux] KDESU again
    ... "When I run KDESU from a Konsole, ... changed -- SGID set. ... "Every nonfree program has a lord, a master -- ...
    (KDE)
  • Re: [kde-linux] KDESU again
    ... On 12/22/2011 05:04 PM, James Tyrer wrote: ... "When I run KDESU from a Konsole, ... It was posted to LFS that it is: "kdesud" that needs the permissions ... changed -- SGID set. ...
    (KDE)
  • Re: K3B wont run any longer.
    ... their hair every time they startx trying to figure out which permissions ... to fix. ... They use kdesu instead of su or sudo. ...
    (Fedora)