Date: Thu, 19 Mar 2009 14:16:04 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: Nikos Ntarmos <ntarmos@cs.uoi.gr> Cc: freebsd-security@freebsd.org Subject: Re: emacs installs a lot of 777 directories Message-ID: <87eiwtwvwb.fsf@kobe.laptop> In-Reply-To: <20090319102606.GA27912@ace.cs.uoi.gr> (Nikos Ntarmos's message of "Thu, 19 Mar 2009 12:26:06 %2B0200") References: <200903062256.n26MuA2r085728@pc.jgr.de> <87ljr61t3v.fsf@kobe.laptop> <20090319102606.GA27912@ace.cs.uoi.gr>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Yep, that's exactly what the Emacs build glue does.
One of the directories mentioned in the permission listings of the
thread includes `leim/'. The source of `emacs/leim/Makefile.in'
installs files with tar and chown:
240 tar -chf - quail/* ja-dic \
241 | (cd ${INSTALLDIR}; umask 0; tar -xvf - && cat > /dev/null) ;\
...
264 find ${INSTALLDIR} -exec chown $${installuser} '{}' ';'
There are probably better ways to install a configurable list of files,
i.e. by using a `manifest' of some sort and piping the list through
xargs to ${INSTALLDIR} and ${INSTALLDATA} macros. This would require
extensive changes to the vendor source though. It may be worth the
effort if someone is interested to hack Emacs sources, so anyone
interested in this sort of change to the GNU sources of Emacs should try
taking this up with the `emacs-devel' mailing list. That's the right
place to discuss potential improvements to Emacs sources, so that all
the other platforms where Emacs works can benefit too :-)
Having said that, fixing the makefiles of Emacs won't really solve the
potential problems of *all* ports when plain `su' is used to install
ports. So while it it a good idea for someone who wants to start
hacking Emacs code, the general rule of "install only with `su -'" still
applies for every other port in our tree.
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (FreeBSD)
iEYEARECAAYFAknCN48ACgkQ1g+UGjGGA7YSygCgjy5BqZZmsuMgJMKXfCDU+ZtU
4TYAnjdWcFPgWQYUUmNh1SYZabM4E81k
=ETeL
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87eiwtwvwb.fsf>