Paul Bryan Roberts write:
The code as it stands creates makefiles with a mode of 600. This may be benign on most (e.g. personal workstation) installations but not all.
An example is where the wine git repository is located on an NFS volume. Here security settings may mean that root:root is treated as nobody:nogroup. Installation from the repository is not possible as root (whether via su or sudo) cannot even read the makefiles
Where I work, NFS is set up so root cannot access any NFS volumes, period, because you really can't trust remote systems that much with NFS.
Dan Kegel wrote:
Paul Bryan Roberts write:
The code as it stands creates makefiles with a mode of 600. This may be benign on most (e.g. personal workstation) installations but not all.
An example is where the wine git repository is located on an NFS volume. Here security settings may mean that root:root is treated as nobody:nogroup. Installation from the repository is not possible as root (whether via su or sudo) cannot even read the makefiles
Where I work, NFS is set up so root cannot access any NFS volumes, period, because you really can't trust remote systems that much with NFS.
Just as an aside, where I work, world write is highly discouraged and must be removed unless absolutely necessary.
James McKenzie
-
Dan Kegel -
James McKenzie