tag 336320 patch
thanks

Hello,

I do not think putting sonar setuid in the default installation is a good idea,
this decision should rather be left to the user. In fact, the user will have to
customize some settings if he wants to ping real hosts, so he can also setuid
the screensaver.

However, it would be nice to document that in a README.Debian, as the right way
to do it is a dpkg-statoverride, that may be unfamiliar to most users. Here is
a sample, to be put in the debian/directory of the source package.

Regards,

-- 
Tanguy Ortolo

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable'), (50, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xscreensaver-gl depends on:
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  libgl1-mesa-glx [libgl1]      7.7.1-4    A free implementation of the OpenG
ii  libglib2.0-0                  2.26.0-1   The GLib library of C routines
ii  libglu1-mesa [libglu1]        7.7.1-4    The OpenGL utility library (GLU)
ii  libgtk2.0-0                   2.20.1-2   The GTK+ graphical user interface 
ii  libice6                       2:1.0.6-1  X11 Inter-Client Exchange library
ii  libsm6                        2:1.1.1-1  X11 Session Management library
ii  libx11-6                      2:1.3.3-3  X11 client-side library
ii  libxext6                      2:1.1.2-1  X11 miscellaneous extension librar
ii  libxmu6                       2:1.0.5-2  X11 miscellaneous utility library
ii  libxpm4                       1:3.5.8-1  X11 pixmap library
ii  libxt6                        1:1.0.7-1  X11 toolkit intrinsics library
ii  libxxf86vm1                   1:1.1.0-2  X11 XFree86 video mode extension l

xscreensaver-gl recommends no packages.

Versions of packages xscreensaver-gl suggests:
ii  xscreensaver                  5.11-1+b1  Automatic screensaver for X

-- no debconf information
The Sonar screensaver can ping hosts to plots their distance (response time)
from you. However, to do so it has to be installed setuid root, because root
privileges are required to make ping packets (/bin/ping is setuid, if you
notice). If you want to enable that feature, run the following command as root:
# dpkg-statoverride --update --add root root 4755 /usr/lib/xscreensaver/sonar

Attachment: signature.asc
Description: Digital signature

Reply via email to