[20202] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Permissions for shared libraries in Kerberos

daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Nov 18 15:04:57 2020

To: Ken Hornstein <kenh@cmf.nrl.navy.mil>, <krbdev@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <bcf80b2f-e6f6-0276-1a27-fc0889fc2e2c@mit.edu>
Date: Wed, 18 Nov 2020 15:04:27 -0500
MIME-Version: 1.0
In-Reply-To: <202011181631.0AIGV0bk017703@hedwig.cmf.nrl.navy.mil>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

On 11/18/20 11:31 AM, Ken Hornstein wrote:
> I'm wondering if Kerberos should simply default to installing shared
> libraries as mode 755/555 everywhere, unless there is a reason to do
> otherwise.

I think that would be reasonable.  As Russ noted, system policies differ
on this point, but toolchains (including libtool) seem to tend in the
direction of setting the executable bit, and the system policies are
decided at the packaging level.

The way our build system has this set up is per-platform; it's currently
+x on HPUX (if building on HPUX even still works) and -x everywhere
else.  So we could make the change globally, or just for Linux platforms.
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post