Installing MIT-K5 client libraries as non-root

Mike Friedman mikef at ack.berkeley.edu
Fri Aug 31 11:29:47 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 31 Aug 2007 at 01:51 (-0400), Ken Raeburn wrote:

> I think there are only two programs that get installed setuid root, ksu 
> and v4rcp.  The rest of the tree shouldn't care about file ownerships, 
> so if you just edit clients/ksu/Makefile and appl/bsd/ Makefile 
> respectively to just avoid installing those programs, it should run 
> okay.

Ken,

Thanks, that helps a lot.  I just removed '-o root' from the definitions 
of INSTALL_SETUID.  The result is that ksu and v4rcp got installed setuid 
to my own userid.  Of course, they won't work, but I'm not planning to use 
those programs anyway.

Thanks again.

Mike

_________________________________________________________________________
Mike Friedman                        Information Services & Technology
mikef at ack.Berkeley.EDU               2484 Shattuck Avenue
1-510-642-1410                       University of California at Berkeley
http://socrates.berkeley.edu/~mikef  http://ist.berkeley.edu
_________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBRtgz7q0bf1iNr4mCEQIPxQCg02HM6JP1SiJzNoR7+wJ1UXTwAx0An1FK
YJYW4LDygjIFInezRuEyLHrU
=Lnfb
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list