Should the book fix file ownerships post-install?

Dan Nicholson dbn.lists at gmail.com
Thu Aug 16 06:06:05 PDT 2007


On 8/16/07, Jeremy Henty <onepoint at starurchin.org> wrote:
>
> While updating the book to emacs 22.1 I've noticed that some files get
> installed into /usr/share/emacs/22.1 owned by the user who built
> emacs.  Should I add instructions to change their ownership to root?
> (I'd argue yes, because a user who owns some of those files could
> trojan the system by altering them and waiting for root to run emacs,
> so it's a security issue.)

Yeah, you should. Normally we try to handle these things in BLFS. I
personally find it irritating when a package's build doesn't handle
this situation properly.

--
Dan



More information about the blfs-dev mailing list