https://bugzilla.novell.com/show_bug.cgi?id=792928
https://bugzilla.novell.com/show_bug.cgi?id=792928#c2
--- Comment #2 from Tomas Cech 2012-12-06 12:53:53 CET ---
(In reply to comment #1)
First, I'm not Enlightenment developer, just packager. Upstream unfortunately
doesn't share your concerns besides the GDB note. And they keep their code
portable over Linux, FreeBSD and other BSD's, Solaris, MacOS X, Windows (XP,
Vista, 7 etc.), Windows CE and more. Most platforms doesn't even have DBUS. I
understand that for you it may be reinventing wheel.
I disabled SUID bits for now not to slow down E17 world domination plan through
openSUSE Factory.
<despair>
What are rules for accepting packages with SUID bit set? What the code needs to
have to qualify for openSUSE? Why the security audit is about purpose and not
about code quality and security issues?
For me Linux means always my choices and my responsibility for that. You're
find interesting having alternative to *Kits. I find interesting that we're
forced to use *Kits. Why do we have more desktop environments, more file
managers, more editors than one?
Your tweet about Enlightenment and freedesktop.org standards is correct, but
there is nothing wrong about that.
</despair>
GDB - I can disable that easily in sysactions.conf (which can be modified only
by root).
halt/reboot/suspend/hibernate - with my patch enlightenment_sys doesn't need to
be SUID and for this I have `dbus-send' calls in sysactions.conf
mount/umount/eject - I have to investigate, udiskctl may be alternative
Freqset - no DBUS alternative, no suid binary, no way - more work and less
functionality for me because 'We let the kernel do its thing regarding
frequency setting usually.', sorry, but why we have cpupower in distribution?
It has similar purpose.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.