From owner-cvs-ports@FreeBSD.ORG Thu Mar 4 15:00:22 2004 Return-Path: Delivered-To: cvs-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E9B0116A4CE; Thu, 4 Mar 2004 15:00:22 -0800 (PST) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id A852043D2D; Thu, 4 Mar 2004 15:00:22 -0800 (PST) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 1A43D54846; Thu, 4 Mar 2004 17:00:22 -0600 (CST) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 13045-04; Thu, 4 Mar 2004 17:00:11 -0600 (CST) Received: from lum.celabo.org (lum.celabo.org [10.0.1.107]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "lum.celabo.org", Issuer "celabo.org CA" (verified OK)) by gw.celabo.org (Postfix) with ESMTP id 6E5435482B; Thu, 4 Mar 2004 17:00:11 -0600 (CST) Received: by lum.celabo.org (Postfix, from userid 501) id 8AF2A10EDAF; Thu, 4 Mar 2004 17:00:02 -0600 (CST) Date: Thu, 4 Mar 2004 17:00:02 -0600 From: "Jacques A. Vidrine" To: Wesley Morgan Message-ID: <20040304230002.GD19335@lum.celabo.org> Mail-Followup-To: "Jacques A. Vidrine" , Wesley Morgan , Will Andrews , cvs-ports@freebsd.org, cvs-all@freebsd.org, Michael Nottebrock , Michael Nottebrock , ports-committers@freebsd.org References: <200402072116.i17LGmkA007339@repoman.freebsd.org> <20040301212624.GF8957@lum.celabo.org> <200403020912.29657.michaelnottebrock@gmx.net> <20040302134752.GB678@lum.celabo.org> <20040302153831.GK13724@sirius.firepipe.net> <20040302175028.GC1377@lum.celabo.org> <20040302175250.GL13724@sirius.firepipe.net> <20040303144420.GB31654@madman.celabo.org> <20040303163111.L55861@volatile.chemikals.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040303163111.L55861@volatile.chemikals.org> X-Url: http://www.celabo.org/ User-Agent: Mutt/1.5.6i cc: "Jacques A. Vidrine" cc: Michael Nottebrock cc: cvs-all@freebsd.org cc: ports-committers@freebsd.org cc: Will Andrews cc: cvs-ports@freebsd.org cc: Michael Nottebrock Subject: Re: cvs commit: ports/audio/arts Makefile X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Mar 2004 23:00:23 -0000 On Wed, Mar 03, 2004 at 04:34:11PM -0500, Wesley Morgan wrote: > IMO any port that wishes to install a suid binary by default should be > required to get approval from the FreeBSD Security Team, and their > decisions, not the port maintainers, be final in cases where it is > optional. This in addition to any prominent warnings about suid binaries > deemed necessary. Well, I'd just be happy to hear from ports maintainers at security-team@ or even freebsd-security@. I think there is a lot of room for fruitful discussion in this area, not in the least regarding the appropriate mechanism to use to implement such `options'. I will be very happy to see what Michael comes up with for artswrappers, and for myself I intend to investigate various X11-related bits that were brought up previously. After we see what is good for a few test cases, then maybe we would be ready to add some guidelines to the Porter's Handbook about handling ports with set-user-ID bits. Cheers, -- Jacques Vidrine / nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org