/usr/bin/ksu and missing suid bit

Greetings,

What the reason /usr/bin/ksu to be without setuid bit?
Are there any security concerns?
I'm asking because the only way to get ksu working is adding by hand the suid bit.
For example when you install heimdal from ports it activate the setuid bit on $prefix/bin/su.

And my second question - is there a option that I can define in src.conf or make.conf, next time when I build/installworld
ksu to have setuid bit ? (in manual I found only knobs for disabling kerberos)

--

Best Wishes,
Stefan Lambrev
ICQ# 24134177

_______________________________________________
freebsd-stable@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: make world and setuid bits
    ... >>> For the vast majority of users, having no setuid binaries is a really, ... >> 1) For server machines that have no non-root interactive users, ... >> reason to not do so? ...
    (FreeBSD-Security)
  • Re: make world and setuid bits
    ... >>> installing binaries as setuid? ... >> For the vast majority of users, having no setuid binaries is a really, ... > 1) For server machines that have no non-root interactive users, ... > reason to not do so? ...
    (FreeBSD-Security)
  • Re: converting real media audio
    ... >> wrapper did not work correctlty. ... A possible reason is that the ... >> program you are trying to run is setuid. ...
    (freebsd-questions)
  • Re: PAM and /etc/shadow and normal users?
    ... From the man pages it's not clear if setuid ... I still don't grasp the security model of linux. ... I.e. can I write an app which simply calls setuid with anyones uid? ...
    (comp.os.linux.development.system)
  • Real and effective uid in setuid executable
    ... I have a setuid executable which is written in C. ... the calling user if the executable is setuid root? ... Is there a good reason for this behaviour? ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)