pkgsrc-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
pkg/57847: unprivileged pkgsrc builds should be able to make privileged binary packages
>Number: 57847
>Category: pkg
>Synopsis: unprivileged pkgsrc builds should be able to make privileged binary packages
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: pkg-manager
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sat Jan 13 19:50:00 +0000 2024
>Originator: Taylor R Campbell
>Release: current
>Organization:
The pkgsrc privilegedation
>Environment:
>Description:
$ cd security/sudo
$ make show-var VARNAME=UNPRIVILEGED
yes
$ make package
=> Bootstrap dependency digest>=20211023: found digest-20220214
ERROR: This package is not available in unprivileged mode.
Although unprivileged pkgsrc can't _install_ privileged packages, i.e., packages with suid executables and similar, it should be able to _build_ them, e.g. with an mtree(8) input to pkg_create to record the privileged permissions.
Similarly, unprivileged builds mask some tools like `chown', replacing them by `true' in installed scripts, like pbulk's pkg-build script. But you should be able to do unprivileged builds of such packages; the build process doesn't need to execute chown in order to bake it into a script.
>How-To-Repeat:
1. set UNPRIVILEGED=yes
2. build a privileged package like security/sudo
3. try to use a package that runs chown at runtime
>Fix:
Yes, please!
Home |
Main Index |
Thread Index |
Old Index