setuid Gnome Applet (Link-Monitor-Applet)

Matt Zimmerman mdz at ubuntu.com
Mon Feb 7 16:56:53 CST 2005


On Mon, Feb 07, 2005 at 01:38:52PM -0500, Aaron Lake wrote:

> Post install (postinst) I've set `chmod u +s /usr/bin/link-monitor-applet`
> which is generally not good practice, nor is having many setuid binaries.
> Would anyone know of a usable workaround that could alleviate this
> problem?  Would this be a candidate for an aproved package with setting
> uid on the binary?

It is definitely not wise for a GNOME applet to be setuid root; the
libraries are not designed for this.

This needs to be fixed at a lower level (kernel? hal?); it should not be
necessary to have root privileges in order to get link status.

-- 
 - mdz



More information about the ubuntu-devel mailing list