Hi, On 02/04/17 18:31, Markus Koschany wrote: > Am 02.04.2017 um 18:29 schrieb James Cowgill: > [...] >> The point is that no user should ever need to be a member of the games >> group and I expect 99% of all users who want to run pyracerz are not. > > I don't see any problem here. This is certainly a better solution than > making an arch:all game arch:any and my answer definitely did resolve > the issue at hand. > >> By your argument, why does pyracerz's postinst contain code to make >> pyracerz setgid? > > Probably because someone copied this code from another game that writes > high score files to /var/games.
Hmm so I see this patch is what moved the highscores to /var/games which would fit with the setgid code being intentionally added: https://sources.debian.net/src/pyracerz/0.2-8/debian/patches/misc.patch/ The bits of that patch (and the others) which move the config into /var/games should be reverted. I still firmly believe that recommending that users add themselves to the games group is wrong. James
signature.asc
Description: OpenPGP digital signature
