On Jul 13, 2007, at 1:43 AM, Frank Barknecht wrote:
Hallo, Miller Puckette hat gesagt: // Miller Puckette wrote:
Pd does a "seteuid(setuid())" to un-get root priveliges if run as setuid, after its priority gets promoted, so that it runs as the user who started it. But there are apparently loopholes, as Mathieu has found.
I'm trying to repeat Frank's trick with /etc/security/limits.conf, so far without success, but if that works it would be much preferable to making Pd setuid root.
Here it works for several months at least:
(~)-$ ls -l /usr/bin/pd -rwxr-xr-x 1 root root 809768 May 31 19:05 /usr/bin/pd (~)-$ /usr/bin/pd -rt priority 8 scheduling enabled. priority 6 scheduling enabled.
Debian with libpam-modules 0.79-4.
I wonder how to set up something like this in a package. Too bad
there isn't something like /etc/security.d/, where packages can
install things. Anyone have any ideas along that line? I guess one
answer is to use Ubuntu Studio... ;)
.hc
Ciao
Frank Barknecht _ ______footils.org_ __goto10.org__
PD-list@iem.at mailing list UNSUBSCRIBE and account-management -> http://lists.puredata.info/ listinfo/pd-list
The arc of history bends towards justice. - Dr. Martin Luther
King, Jr.