[28312] in Kerberos
Re: Installing MIT-K5 client libraries as non-root
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Fri Aug 31 01:54:10 2007
In-Reply-To: <20070830220408.E17045@malcolm.berkeley.edu>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <37171109-9372-470E-BCAB-F1F14EC701D4@mit.edu>
From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 31 Aug 2007 01:51:12 -0400
To: Mike Friedman <mikef@ack.berkeley.edu>
Cc: Kerberos <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Aug 31, 2007, at 01:08, Mike Friedman wrote:
> I even tried editing the top-level Makefile to remove the '-o
> root'. But
> the lower-level Makefiles still contained '-o root' and I don't
> feel like
> going into every subdirectory and editing the Makefiles, especially
> since
> I don't even know if this will solve the problem.
I think there are only two programs that get installed setuid root,
ksu and v4rcp. The rest of the tree shouldn't care about file
ownerships, so if you just edit clients/ksu/Makefile and appl/bsd/
Makefile respectively to just avoid installing those programs, it
should run okay.
In fact, you can probably just delete the entire directories. I
haven't tried it in this case, but I think most of our recursive-make
stuff does "if directory exists and dir/Makefile exists, run make in
the directory". (It would mean you couldn't successfully run "make
check", since our tests do use rlogin and friends.) There are
occasional places where we reference subdirectories and assume they
exist, so it's not guaranteed this'll work. Only takes a couple
minutes to find out, though. :)
Ken
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
iD8DBQFG16xQUqOaDMQ+e5gRAnsDAKCgEY98yJy6rOThCQgEcXCWqI1rbACeJJC0
Dpfz0Szt7zMQbTWgRXiPcAc=
=9YAn
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
