Issue with RCS + SUID
Daniel Wheeler <[email protected]> Fri, 14 Jul 2023 09:56:32 -0700
| Newsgroups | gmane.comp.gnu.rcs |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--------------HJw9u6fAwA0enHc4YSvr86fU
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Hello,
We are trying to setup RCS with SUID to prevent users other than the
primary user from deleting revisions. We followed the directions in the
man page for ci, but we are getting permissions issues when we try to
checkout as one of the other users.
This is our setup:
* Master user: sjc001
* Group permitted to CI/CO: fte
* Test alternate user in the fte group: sha001
This is the procedure we followed from the man page:
* mkdir /usr/local/rcs-sjc001
* cp /usr/bin/ci /usr/local/rcs-sjc001/
* cp /usr/bin/co /usr/local/rcs-sjc001/
* cp /usr/bin/rcsclean /usr/local/rcs-sjc001/
* chmod go-w,u+s /usr/local/rcs-sjc001/*
* PATH=/usr/local/rcs-sjc001:$PATH; export $PATH
--------------HJw9u6fAwA0enHc4YSvr86fU
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>We are trying to setup RCS with SUID to prevent users other than
the primary user from deleting revisions. We followed the
directions in the man page for ci, but we are getting permissions
issues when we try to checkout as one of the other users.</p>
<p>This is our setup:</p>
<ul>
<li>Master user: sjc001</li>
<li>Group permitted to CI/CO: fte</li>
<li>Test alternate user in the fte group: sha001</li>
</ul>
<p>This is the procedure we followed from the man page:</p>
<ul>
<li>mkdir /usr/local/rcs-sjc001</li>
<li>cp /usr/bin/ci /usr/local/rcs-sjc001/</li>
<li>cp /usr/bin/co /usr/local/rcs-sjc001/</li>
<li>cp /usr/bin/rcsclean /usr/local/rcs-sjc001/</li>
<li>chmod go-w,u+s /usr/local/rcs-sjc001/*</li>
<li>PATH=/usr/local/rcs-sjc001:$PATH; export $PATH</li>
</ul>
<p><br>
</p>
</body>
</html>
--------------HJw9u6fAwA0enHc4YSvr86fU--