| Newsgroups |
gmane.linux.lfs.security |
| Message-ID |
<[email protected]> |
The admin of this system would have to take root fairly seriously for all this
to make sence. Without a more sophisticated package system, I think it would
be good to use a non-root user to build packages, and Sudo with some decent
rules, to install.
Gnu tar saves permissions when its run as root. A lot of source and cvs have
wacky permissions, and I can't realy think of any reason I would want to
preserve foriegn uid's and group/other writable. Although tar could be
patched for this, unpacking source as non-root doesn't preserve the modes by
default. Some packages, wordperfect comes to mind, unpack source in /, which
is bad; non-root wouldn't be able to do that so easily. Also a non-root
package building user wouldn't have unlimited resources which root has when
running expencive programs like gcc.
I think a few programs rely on bash being installed, but that doesn't mean
everything has to use it. Pdksh, csh, or restricted bash (rbash) could be
used in boot and other scripts that run as root.
--
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page