Installing MIT-K5 client libraries as non-root

Ken Raeburn raeburn at MIT.EDU
Fri Aug 31 01:51:12 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Aug 31, 2007, at 01:08, Mike Friedman wrote:
> I even tried editing the top-level Makefile to remove the '-o  
> root'.  But
> the lower-level Makefiles still contained '-o root' and I don't  
> feel like
> going into every subdirectory and editing the Makefiles, especially  
> since
> I don't even know if this will solve the problem.

I think there are only two programs that get installed setuid root,  
ksu and v4rcp.  The rest of the tree shouldn't care about file  
ownerships, so if you just edit clients/ksu/Makefile and appl/bsd/ 
Makefile respectively to just avoid installing those programs, it  
should run okay.

In fact, you can probably just delete the entire directories.  I  
haven't tried it in this case, but I think most of our recursive-make  
stuff does "if directory exists and dir/Makefile exists, run make in  
the directory".  (It would mean you couldn't successfully run "make  
check", since our tests do use rlogin and friends.)  There are  
occasional places where we reference subdirectories and assume they  
exist, so it's not guaranteed this'll work.  Only takes a couple  
minutes to find out, though. :)

Ken


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)

iD8DBQFG16xQUqOaDMQ+e5gRAnsDAKCgEY98yJy6rOThCQgEcXCWqI1rbACeJJC0
Dpfz0Szt7zMQbTWgRXiPcAc=
=9YAn
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list