>Number:         13294
>Category:       pkg
>Synopsis:       kdebase-2.1: all screensavers are incorrectly set mode 4555
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Sat Jun 23 18:42:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Scott Presnell
>Release:        5/26/2001
>Organization:
Self
>Environment:
System: NetBSD srp1 1.5V NetBSD 1.5V (PO) #1: Wed Jun 20 10:01:41 PDT 2001 root@srp4:/usr/syssrc/sys/arch/i386/compile/PO i386
Architecture: i386
Machine: i386
>Description:

After buliding a shared version of libXdpms, I was able to build a shared
version of libkcm_screensaver and gain access to the KDE screensavers.
However, in the kdebase-2.1 binary package all the screen savers where mode
4775: KDE doesn't allow running of setuid screensavers and the following
is reported:

  "The KDE libraries are not designed to run with suid privileges."


>How-To-Repeat:

1) Build and install libXdpms.so from XFree86 distribution
2) Get kdebase-2.1 build and install libkcm_screensaver
3) attempt to setup/test a screensaver.

>Fix:

chmod 555 /usr/X11R6/bin/*.kss
Changing the package should also be investigated.

When I installed them after building the kdebase-2.1 package they
were not installed setuid, so I'm not sure why they were setuid in
the first place?
>Release-Note:
>Audit-Trail:
>Unformatted: