 | | | prevent setuid/setguid files in rpm installs | prevent setuid/setguid files in rpm installs 2005-03-20 - By Garrick Staples
Back
On Mon, Mar 07, 2005 at 11:33:00AM -0500, Jerry Uanino alleged:
> I'm considering giving developer groups access to specific rpm
> commands. I think with the --relocate and --noscripts options of rpm
> this could be somewhat safe. However, what I cannot overcome is the
> setuid/setguid files it might create. Is there any way to prevent
> setuid root files in the install of an rpm?
Don't allow them to install rpms. Just use 'cat $rpm | rpm2cpio | cpio -id'
to extract the files into your development directory.
--
Garrick Staples, Linux/HPCC Administrator
University of Southern California
--
Taroon-list mailing list
Taroon-list@(protected)
http://www.redhat.com/mailman/listinfo/taroon-list
Earn $52 per hosting referral at Lunarpages.
|
|
|