* Re: [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid [not found] <E1Y9Fya-0004Me-Ao@sd-51317.xenomai.org> @ 2015-01-12 10:34 ` Philippe Gerum 2015-01-12 12:42 ` Jan Kiszka 0 siblings, 1 reply; 4+ messages in thread From: Philippe Gerum @ 2015-01-12 10:34 UTC (permalink / raw) To: xenomai, xenomai-git On 01/08/2015 05:30 PM, git repository hosting wrote: > Module: xenomai-jki > Branch: for-forge > Commit: 7d56f2b19f987069ef0025f9ce5f8cc52781f340 > URL: http://git.xenomai.org/?p=xenomai-jki.git;a=commit;h=7d56f2b19f987069ef0025f9ce5f8cc52781f340 > > Author: Jan Kiszka <jan.kiszka@siemens.com> > Date: Thu Jan 8 14:30:52 2015 +0100 > > sysregd: Install as suid > > sysregd has to run with root privileges in order to be able to clean up > the mounts of unprivileged users. > > Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> > This one assumes root id on "make install", which is not a prerequisite for installing a Mercury setup. This leads to sysregd losing root privileges on execution, which contradicts the purpose. We need sudo detection and use for this, just like we do in the top level Makefile for creating /dev entries. -- Philippe. ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid 2015-01-12 10:34 ` [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid Philippe Gerum @ 2015-01-12 12:42 ` Jan Kiszka 2015-01-12 14:00 ` Jan Kiszka 0 siblings, 1 reply; 4+ messages in thread From: Jan Kiszka @ 2015-01-12 12:42 UTC (permalink / raw) To: Philippe Gerum, xenomai On 2015-01-12 11:34, Philippe Gerum wrote: > On 01/08/2015 05:30 PM, git repository hosting wrote: >> Module: xenomai-jki >> Branch: for-forge >> Commit: 7d56f2b19f987069ef0025f9ce5f8cc52781f340 >> URL: http://git.xenomai.org/?p=xenomai-jki.git;a=commit;h=7d56f2b19f987069ef0025f9ce5f8cc52781f340 >> >> Author: Jan Kiszka <jan.kiszka@siemens.com> >> Date: Thu Jan 8 14:30:52 2015 +0100 >> >> sysregd: Install as suid >> >> sysregd has to run with root privileges in order to be able to clean up >> the mounts of unprivileged users. >> >> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> >> > > This one assumes root id on "make install", which is not a prerequisite > for installing a Mercury setup. This leads to sysregd losing root > privileges on execution, which contradicts the purpose. > > We need sudo detection and use for this, just like we do in the top > level Makefile for creating /dev entries. OK. Jan -- Siemens AG, Corporate Technology, CT RTC ITP SES-DE Corporate Competence Center Embedded Linux ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid 2015-01-12 12:42 ` Jan Kiszka @ 2015-01-12 14:00 ` Jan Kiszka 2015-01-12 14:11 ` Jan Kiszka 0 siblings, 1 reply; 4+ messages in thread From: Jan Kiszka @ 2015-01-12 14:00 UTC (permalink / raw) To: Philippe Gerum, xenomai On 2015-01-12 13:42, Jan Kiszka wrote: > On 2015-01-12 11:34, Philippe Gerum wrote: >> On 01/08/2015 05:30 PM, git repository hosting wrote: >>> Module: xenomai-jki >>> Branch: for-forge >>> Commit: 7d56f2b19f987069ef0025f9ce5f8cc52781f340 >>> URL: http://git.xenomai.org/?p=xenomai-jki.git;a=commit;h=7d56f2b19f987069ef0025f9ce5f8cc52781f340 >>> >>> Author: Jan Kiszka <jan.kiszka@siemens.com> >>> Date: Thu Jan 8 14:30:52 2015 +0100 >>> >>> sysregd: Install as suid >>> >>> sysregd has to run with root privileges in order to be able to clean up >>> the mounts of unprivileged users. >>> >>> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> >>> >> >> This one assumes root id on "make install", which is not a prerequisite >> for installing a Mercury setup. This leads to sysregd losing root >> privileges on execution, which contradicts the purpose. >> >> We need sudo detection and use for this, just like we do in the top >> level Makefile for creating /dev entries. > > OK. Is there a way to maintain that sudo test code only in one place? I'm currently not finding an obvious one. Jan -- Siemens AG, Corporate Technology, CT RTC ITP SES-DE Corporate Competence Center Embedded Linux ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid 2015-01-12 14:00 ` Jan Kiszka @ 2015-01-12 14:11 ` Jan Kiszka 0 siblings, 0 replies; 4+ messages in thread From: Jan Kiszka @ 2015-01-12 14:11 UTC (permalink / raw) To: Philippe Gerum, xenomai On 2015-01-12 15:00, Jan Kiszka wrote: > On 2015-01-12 13:42, Jan Kiszka wrote: >> On 2015-01-12 11:34, Philippe Gerum wrote: >>> On 01/08/2015 05:30 PM, git repository hosting wrote: >>>> Module: xenomai-jki >>>> Branch: for-forge >>>> Commit: 7d56f2b19f987069ef0025f9ce5f8cc52781f340 >>>> URL: http://git.xenomai.org/?p=xenomai-jki.git;a=commit;h=7d56f2b19f987069ef0025f9ce5f8cc52781f340 >>>> >>>> Author: Jan Kiszka <jan.kiszka@siemens.com> >>>> Date: Thu Jan 8 14:30:52 2015 +0100 >>>> >>>> sysregd: Install as suid >>>> >>>> sysregd has to run with root privileges in order to be able to clean up >>>> the mounts of unprivileged users. >>>> >>>> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> >>>> >>> >>> This one assumes root id on "make install", which is not a prerequisite >>> for installing a Mercury setup. This leads to sysregd losing root >>> privileges on execution, which contradicts the purpose. >>> >>> We need sudo detection and use for this, just like we do in the top >>> level Makefile for creating /dev entries. >> >> OK. > > Is there a way to maintain that sudo test code only in one place? I'm > currently not finding an obvious one. Forget it, the logic is too different anyway on second look. Jan -- Siemens AG, Corporate Technology, CT RTC ITP SES-DE Corporate Competence Center Embedded Linux ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2015-01-12 14:11 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <E1Y9Fya-0004Me-Ao@sd-51317.xenomai.org>
2015-01-12 10:34 ` [Xenomai] [Xenomai-git] Jan Kiszka : sysregd: Install as suid Philippe Gerum
2015-01-12 12:42 ` Jan Kiszka
2015-01-12 14:00 ` Jan Kiszka
2015-01-12 14:11 ` Jan Kiszka
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.