Attachment #16301 for bug #29939

View | Details | Raw Unified | Return to bug 29939
Collapse All | Expand All




	done

post-install:
	@${CAT} ${PKGMESSAGE}

enable-nonroot:

	/usr/sbin/pw groupadd -n cdwrite

	for i in cdrecord cdda2wav mkisofs readcd; do \
	    ${CHOWN} root:cdwrite ${LOCALBASE}/bin/$$i ; \
	    ${CHMOD} 4710 ${LOCALBASE}/bin/$$i ; \
	done

	${CHOWN} root:cdwrite ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap
	${CHMOD} 2755 ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap

	@${ECHO} ""
	@${ECHO} "***************************************************************"

	@${ECHO} " this file, a normal user will get an error message."
	@${ECHO} "***************************************************************"
	@${ECHO} ""

.include <bsd.port.mk>





***********************************************************
                      ATTENTION!

You must be root to use xcdroast. To use it as normal user,
type "make enable-nonroot". But beware! This is a security
risk. It modifies the following files and give them the
set-user-ID-on-execution bit.

cdrecord(1)
readcd(1)
cdda2wav(1)
mkisofs(8)

All group members of "cdwrite" are able to run these files
as root. Usually, these group has no members.
Users added to this group may start these files as root

***********************************************************


Return to bug 29939

Lines 34-49 Link Here

(-)xcdroast/Makefile (-6 / +10 lines)
34	done	34	done
35		35
36	post-install:	36	post-install:
		37	@${CAT} ${PKGMESSAGE}
		38
		39	enable-nonroot:
37		40
38	/usr/sbin/pw groupadd -n cdwrite	41	/usr/sbin/pw groupadd -n cdwrite
39		42
40	# for i in cdrecord cdda2wav mkisofs readcd; do \	43	for i in cdrecord cdda2wav mkisofs readcd; do \
41	# ${CHOWN} root:cdwrite ${LOCALBASE}/bin/$$i ; \	44	${CHOWN} root:cdwrite ${LOCALBASE}/bin/$$i ; \
42	# ${CHMOD} 4710 ${LOCALBASE}/bin/$$i ; \	45	${CHMOD} 4710 ${LOCALBASE}/bin/$$i ; \
43	# done	46	done
44		47
45	# ${CHOWN} root:cdwrite ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap	48	${CHOWN} root:cdwrite ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap
46	# ${CHMOD} 2755 ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap	49	${CHMOD} 2755 ${PREFIX}/lib/xcdroast-0.98/bin/xcdrwrap
47		50
48	@${ECHO} ""	51	@${ECHO} ""
49	@${ECHO} "***************************************************************"	52	@${ECHO} "***************************************************************"
Lines 52-55 Link Here
52	@${ECHO} " this file, a normal user will get an error message."	55	@${ECHO} " this file, a normal user will get an error message."
53	@${ECHO} "***************************************************************"	56	@${ECHO} "***************************************************************"
54	@${ECHO} ""	57	@${ECHO} ""
		58
55	.include <bsd.port.mk>	59	.include <bsd.port.mk>

Line 0 Link Here

(-)xcdroast/pkg-message (+20 lines)
	1
	2	***********************************************************
	3	ATTENTION!
	4
	5	You must be root to use xcdroast. To use it as normal user,
	6	type "make enable-nonroot". But beware! This is a security
	7	risk. It modifies the following files and give them the
	8	set-user-ID-on-execution bit.
	9
	10	cdrecord(1)
	11	readcd(1)
	12	cdda2wav(1)
	13	mkisofs(8)
	14
	15	All group members of "cdwrite" are able to run these files
	16	as root. Usually, these group has no members.
	17	Users added to this group may start these files as root
	18
	19	***********************************************************
	20