Mail archive
alpine-devel

Re: [alpine-devel] 3.3 proposal: reduce number of SUID binaries as much as possible

From: William Pitcock <nenolod_at_dereferenced.org>
Date: Fri, 29 May 2015 11:43:39 -0500

Hi,

On Wed, May 27, 2015 at 3:19 PM, Orion <systmkor_at_gmail.com> wrote:
> On Tue, 26 May 2015 04:32:01 -0500
> William Pitcock <nenolod_at_dereferenced.org> wrote:
>
>> I would like to see a general reduction of SUID binaries where
>> possible. For example, a lot of APKBUILDs have options=suid when
>> there's probably no real reason for it.
>
> I fully support this endeavor! :D I will gladly help out and maintain
> this project. However, I would prefer that we start with the base system
> before we move onto other packages. So I think a great first attempt
> would be removing as many SUIDs/SGIDs from a bare bones alpine-mini
> install.

As far as I know there's no SUID/SGID enabled packages in alpine-mini
other than bbsuid which we install to proxy only the SUID-needing bits
of busybox.

William


---
Unsubscribe:  alpine-devel+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-devel+help_at_lists.alpinelinux.org
---
Received on Fri May 29 2015 - 11:43:39 GMT