From owner-freebsd-stable@FreeBSD.ORG  Sat May 10 15:18:52 2008
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0104D106567D
	for <freebsd-stable@freebsd.org>; Sat, 10 May 2008 15:18:52 +0000 (UTC)
	(envelope-from stefan.lambrev@moneybookers.com)
Received: from blah.sun-fish.com (blah.sun-fish.com [217.18.249.150])
	by mx1.freebsd.org (Postfix) with ESMTP id A84EF8FC15
	for <freebsd-stable@freebsd.org>; Sat, 10 May 2008 15:18:51 +0000 (UTC)
	(envelope-from stefan.lambrev@moneybookers.com)
Received: by blah.sun-fish.com (Postfix, from userid 1002)
	id CBFE91B10EF8; Sat, 10 May 2008 17:18:49 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on blah.cmotd.com
X-Spam-Level: 
X-Spam-Status: No, score=-10.6 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=ham version=3.2.4
Received: from hater.haters.org (hater.cmotd.com [192.168.3.125])
	by blah.sun-fish.com (Postfix) with ESMTP id 36B5A1B10EF1
	for <freebsd-stable@freebsd.org>; Sat, 10 May 2008 17:18:47 +0200 (CEST)
Message-ID: <4825BCD6.4080001@moneybookers.com>
Date: Sat, 10 May 2008 18:18:46 +0300
From: Stefan Lambrev <stefan.lambrev@moneybookers.com>
User-Agent: Thunderbird 2.0.0.14 (X11/20080503)
MIME-Version: 1.0
To: FreeBSD Stable <freebsd-stable@freebsd.org>
Content-Type: text/plain; charset=windows-1251; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV version 0.93,
	clamav-milter version 0.93 on blah.cmotd.com
X-Virus-Status: Clean
Subject: /usr/bin/ksu and missing suid bit
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 10 May 2008 15:18:52 -0000

Greetings,

What the reason /usr/bin/ksu to be without setuid bit?
Are there any security concerns?
I'm asking because the only way to get ksu working is adding by hand the 
suid bit.
For example when you install heimdal from ports it activate the setuid 
bit on $prefix/bin/su.

And my second question - is there a option that I can define in src.conf 
or make.conf, next time when I build/installworld
ksu to have setuid bit ? (in manual I found only knobs for disabling 
kerberos)

-- 

Best Wishes,
Stefan Lambrev
ICQ# 24134177