On Fri, 9 Mar 2001, Matthias Drochner wrote:

> While updating the scigraphica pkg (not yet committed) I found that
> some GNOME libs (glib/gtk) it depends on are a bit out of date.
> Since the GNOME UI stuff tends to be a bit unstable in general,
> I'd hope that an update would improve stability a bit.
> There is a catch however:
> The new gtk-1.2.9 explicitely refuses to run in SUID programs.
> While it is probably not a good idea to run X apps as SUID
> anyway, there is at least one popular program (xcdroast)
> which partly depends on it.
> So an update would break the mode where xcdroast is run by
> a plain user.
>
> So what to do:
> a) update gtk and tell xcdroast users to run it as root
> b) don't update, wait until xcdroast is fixed
> c) update but comment out the SUID detection code in gtk
> d) update gtk but keep the old version as gtk-old or so,
>    make xcdroast use the old stuff
> e) hack xcdroast to use some SUID wrapper or so
>
> I personally could live with (a), the next preferrable
> would be (d).

	I'd go with a), and maybe include some notes on how to use
	sudo or similar to have passwordless root access to xcdroast
	in the xcdroast MESSAGE.

		David/absolute		-- www.netbsd.org: No hype required --