From owner-freebsd-arch Fri Aug 11 13:40:21 2000 Delivered-To: freebsd-arch@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id 0533E37B6DC; Fri, 11 Aug 2000 13:40:12 -0700 (PDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id OAA10234; Fri, 11 Aug 2000 14:40:10 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id OAA52272; Fri, 11 Aug 2000 14:39:39 -0600 (MDT) Message-Id: <200008112039.OAA52272@harmony.village.org> To: arch@freebsd.org Subject: Re: cvs commit: src/gnu/usr.bin/perl Makefile Reply-To: arch@freebsd.org Cc: cvs-committers@freebsd.org In-reply-to: Your message of "Sat, 11 Aug 2000 22:19:51 +0200." <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za> References: <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za> Date: Fri, 11 Aug 2000 14:39:39 -0600 From: Warner Losh Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG [[ followups to -arch ]] In message <200008112019.e7BKJpP59373@zibbi.mikom.csir.co.za> John Hay writes: : > Perhaps it's time to add a make.conf variable like SECURE_SUID_ROOT : > (or something) and have *all* but the most essential suid binaries : > conditionalize their installation modes from its setting. Turn it on : > or off by default, I don't really care, just make it easier to have : > things like suidperl without actually mucking with sources. : : Then we will also need its equivalent in sysinstall so that you can : decide at install time what kind of setup you want. :-) I don't think it is time to have that. We already drive to have a minimal set of setuid binaries on the system. suidperl is the largest one we have, has a history of bugs and is hard to audit and isn't that widely used. That's why I didn't want it laying around with setuid bit set on it. It is literally unique in the tree. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message