Precedence: list
MIME-Version: 1.0
In-Reply-To: <20150527131901.790405cc@twinpeaks.my.domain>
References: <CA+T2pCFTMLEuZjsYCbXVK7GEG3v0S9EvP5FkbboS+mKRK9_0yA@mail.gmail.com>
	<20150527131901.790405cc@twinpeaks.my.domain>
Date: Fri, 29 May 2015 11:43:39 -0500
Message-ID: <CA+T2pCGDVKDkgk2hAQR=b7Bbjnj9fHjQdkzrK5ANoykzav1P3A@mail.gmail.com>
Subject: Re: [alpine-devel] 3.3 proposal: reduce number of SUID binaries as
 much as possible
From: William Pitcock <nenolod@dereferenced.org>
To: Orion <systmkor@gmail.com>
Cc: alpine-devel@lists.alpinelinux.org
Content-Type: text/plain; charset=UTF-8

Hi,

On Wed, May 27, 2015 at 3:19 PM, Orion <systmkor@gmail.com> wrote:
> On Tue, 26 May 2015 04:32:01 -0500
> William Pitcock <nenolod@dereferenced.org> wrote:
>
>> I would like to see a general reduction of SUID binaries where
>> possible.  For example, a lot of APKBUILDs have options=suid when
>> there's probably no real reason for it.
>
> I fully support this endeavor! :D I will gladly help out and maintain
> this project. However, I would prefer that we start with the base system
> before we move onto other packages. So I think a great first attempt
> would be removing as many SUIDs/SGIDs from a bare bones alpine-mini
> install.

As far as I know there's no SUID/SGID enabled packages in alpine-mini
other than bbsuid which we install to proxy only the SUID-needing bits
of busybox.

William


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---