diff options
| author | Will Andrews <will@FreeBSD.org> | 2001-11-01 00:55:05 +0000 |
|---|---|---|
| committer | Will Andrews <will@FreeBSD.org> | 2001-11-01 00:55:05 +0000 |
| commit | af8ba09bbb5742c70052ec410cffdb8e28622df4 (patch) | |
| tree | cac537c7e907523ba26658624141c535396336b6 /x11/kde4-runtime | |
| parent | Explicitly set the LATEST_LINK -- right now this port and tcl82 are (diff) | |
Bite the bullet and make kcheckpass setuid root by default so the lock
and screensaver functions work by default (i.e. they let you back in if
you type the right password). This will also avoid the caveat that quite
often people install KDE using the metaport and usually leave it runnning
and by the time it's done, the not-so-helpful message is long gone.
Usability police: ~20 emails from users...
Won't mind releasing a security advisory for this if needed: kris
Notes
Notes:
svn path=/head/; revision=49440
Diffstat (limited to 'x11/kde4-runtime')
| -rw-r--r-- | x11/kde4-runtime/Makefile | 3 | ||||
| -rw-r--r-- | x11/kde4-runtime/pkg-message | 21 |
2 files changed, 2 insertions, 22 deletions
diff --git a/x11/kde4-runtime/Makefile b/x11/kde4-runtime/Makefile index a78f50c90742..ee69d6cb95bb 100644 --- a/x11/kde4-runtime/Makefile +++ b/x11/kde4-runtime/Makefile @@ -7,6 +7,7 @@ PORTNAME= kdebase PORTVERSION= 2.2.1 +PORTREVISION= 1 CATEGORIES?= x11 kde MASTER_SITES= ${MASTER_SITE_KDE} MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src @@ -64,6 +65,6 @@ post-configure: ${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile post-install: - @${CAT} ${PKGMESSAGE} + ${CHMOD} u+s ${PREFIX}/bin/kcheckpass .include <bsd.port.post.mk> diff --git a/x11/kde4-runtime/pkg-message b/x11/kde4-runtime/pkg-message deleted file mode 100644 index 1869be60abfa..000000000000 --- a/x11/kde4-runtime/pkg-message +++ /dev/null @@ -1,21 +0,0 @@ - -************************** I M P O R T A N T **************************** - -This package (kdebase2) installs a program called kcheckpass which is -used by kdm or screensavers to check the user's password. This activity -requires it to be setuid root. However, for security reasons, FreeBSD -leaves the setuid bit on this binary off by default, for several reasons. -First, some people may not use screensavers or kdm at all. Second, -others may choose to use a different screensaver or display manager -utility. And finally, there may be holes in kcheckpass which can be -exploited to gain root privileges. FreeBSD chooses not to take that risk -with the default package. If you decide that you need it setuid root, -you can make it so: - - chmod u+s ${PREFIX}/bin/kcheckpass - -..where ${PREFIX} is the prefix where this package was installed. It is -typically /usr/local but may also be /usr/X11R6 or /usr. - -************************** I M P O R T A N T **************************** - |