|
|||||||||||
|
setuid binary in ktsuss
From: Yves-Alexis Perez <corsac(at)debian.org>
Date: Sat Feb 09 2008 - 16:05:34 EST
I'm about to upload ktsuss to debian, wich is a graphical wrapper around su (much like gksu but without any gnome dependency). One point puzzles me, the ktsuss binary is setuid root (so it can read the root password). gksu doesn't do this (it calls su, I guess). I don't really want to upload a setuid binary if it's not safe, but the code looks good (and is really tiny). Could some people on this list take some time and check the code?
dsc can be found at:
Thanks for your time, -- Yves-Alexis -- To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 06:55:38 EDT |
||||||||||
|
|||||||||||