Issue with RCS + SUID

Daniel Wheeler <[email protected]> Fri, 14 Jul 2023 09:56:32 -0700
Newsgroups gmane.comp.gnu.rcs
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--------------HJw9u6fAwA0enHc4YSvr86fU
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hello,

We are trying to setup RCS with SUID to prevent users other than the 
primary user from deleting revisions. We followed the directions in the 
man page for ci, but we are getting permissions issues when we try to 
checkout as one of the other users.

This is our setup:

  * Master user: sjc001
  * Group permitted to CI/CO: fte
  * Test alternate user in the fte group: sha001

This is the procedure we followed from the man page:

  * mkdir /usr/local/rcs-sjc001
  * cp /usr/bin/ci /usr/local/rcs-sjc001/
  * cp /usr/bin/co /usr/local/rcs-sjc001/
  * cp /usr/bin/rcsclean /usr/local/rcs-sjc001/
  * chmod go-w,u+s /usr/local/rcs-sjc001/*
  * PATH=/usr/local/rcs-sjc001:$PATH; export $PATH


--------------HJw9u6fAwA0enHc4YSvr86fU
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hello,</p>
    <p>We are trying to setup RCS with SUID to prevent users other than
      the primary user from deleting revisions. We followed the
      directions in the man page for ci, but we are getting permissions
      issues when we try to checkout as one of the other users.</p>
    <p>This is our setup:</p>
    <ul>
      <li>Master user: sjc001</li>
      <li>Group permitted to CI/CO: fte</li>
      <li>Test alternate user in the fte group: sha001</li>
    </ul>
    <p>This is the procedure we followed from the man page:</p>
    <ul>
      <li>mkdir /usr/local/rcs-sjc001</li>
      <li>cp /usr/bin/ci /usr/local/rcs-sjc001/</li>
      <li>cp /usr/bin/co /usr/local/rcs-sjc001/</li>
      <li>cp /usr/bin/rcsclean /usr/local/rcs-sjc001/</li>
      <li>chmod go-w,u+s /usr/local/rcs-sjc001/*</li>
      <li>PATH=/usr/local/rcs-sjc001:$PATH; export $PATH</li>
    </ul>
    <p><br>
    </p>
  </body>
</html>
--------------HJw9u6fAwA0enHc4YSvr86fU--