Re: pkg/34149 (angband-tty doesn't work after recent update)

[dholland%eecs.harvard.edu@localhost (David Holland)]

The following reply was made to PR pkg/34149; it has been noted by GNATS.

From: dholland%eecs.harvard.edu@localhost (David Holland)
To: cube%cubidou.net@localhost (Quentin Garnier)
Cc: dholland%eecs.harvard.edu@localhost (David Holland), 
gnats-bugs%NetBSD.org@localhost
Subject: Re: pkg/34149 (angband-tty doesn't work after recent update)
Date: Mon, 14 Aug 2006 17:22:27 -0400 (EDT)

  > > Probably a better long-term approach would be to have it go by putting
  > > setgid in $(PKG_OPTIONS).foo, but that's also probably a lot of work.
  > 
  > I don't think it makes much sense to not have it on by default when
  > installing with privileges.  I'll start a discussion on tech-pkg.
 
 Well, from a security perspective, it's probably a good idea not to
 install random games (many of which are thoroughly insecure) setgid
 without asking, just so they can keep a global high scores file.
 
 Most such games don't just crap out instantly if run unprivileged,
 though, like angband seems to.
 
 It seems like it ought to be controllable on a per-package basis and
 ought to default to on for some packages and not others... which the
 current scheme doesn't support.
 
 I'm not familiar enough with pkgsrc to go hack this up myself, at
 least not without spending a fair amount of time on it, so tech-pkg is
 probably a good idea.
 
 -- 
    - David A. Holland / dholland%eecs.harvard.edu@localhost