[20205] in Kerberos_V5_Development
Re: Permissions for shared libraries in Kerberos
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Thu Nov 26 14:06:47 2020
Date: Thu, 26 Nov 2020 11:06:26 -0800
From: Benjamin Kaduk <kaduk@mit.edu>
To: Greg Hudson <ghudson@mit.edu>
Message-ID: <20201126190626.GD34187@kduck.mit.edu>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <bcf80b2f-e6f6-0276-1a27-fc0889fc2e2c@mit.edu>
Cc: Ken Hornstein <kenh@cmf.nrl.navy.mil>, krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Wed, Nov 18, 2020 at 03:04:27PM -0500, Greg Hudson wrote:
> On 11/18/20 11:31 AM, Ken Hornstein wrote:
> > I'm wondering if Kerberos should simply default to installing shared
> > libraries as mode 755/555 everywhere, unless there is a reason to do
> > otherwise.
>
> I think that would be reasonable. As Russ noted, system policies differ
> on this point, but toolchains (including libtool) seem to tend in the
> direction of setting the executable bit, and the system policies are
> decided at the packaging level.
>
> The way our build system has this set up is per-platform; it's currently
> +x on HPUX (if building on HPUX even still works) and -x everywhere
> else. So we could make the change globally, or just for Linux platforms.
They end up shared on FreeBSD (via packaging) as well, though I'm not the
package maintainer for that one and didn't fully track down exactly where
that happens. (The default INSTALL_LIB specifies a file mode to use, but
it was not entirely clear to me that we actually honor INSTALL_LIB just
from a `git grep`.)
-Ben
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
