diff options
author | Slávek Banko <slavek.banko@axis.cz> | 2014-03-09 03:26:50 +0100 |
---|---|---|
committer | Slávek Banko <slavek.banko@axis.cz> | 2014-03-09 03:26:50 +0100 |
commit | 4538fd673d9de4a9764f7ce96e35dc9d4e4977cf (patch) | |
tree | b47d494ac058f89a207b3c8219560bea557d5780 /ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian | |
parent | 5fff8c470474773fad5bd31decf0aa25a5c4f59b (diff) | |
download | tde-packaging-4538fd673d9de4a9764f7ce96e35dc9d4e4977cf.tar.gz tde-packaging-4538fd673d9de4a9764f7ce96e35dc9d4e4977cf.zip |
Housekeeping in Debian and Ubuntu
Diffstat (limited to 'ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian')
-rw-r--r-- | ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian | 28 |
1 files changed, 0 insertions, 28 deletions
diff --git a/ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian b/ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian deleted file mode 100644 index d6cf29558..000000000 --- a/ubuntu/maverick_automake/kdeutils/debian/klaptopdaemon.README.Debian +++ /dev/null @@ -1,28 +0,0 @@ -klaptopdaemon and SUID permissions ----------------------------------- - -To allow ordinary users to control certain power management features, -klaptopdaemon's panel in the KDE Control Center has a button which prompts -the user to enter the root password (KDE Control Center --> Power Control ---> Laptop Battery, then the ACPI Config tab, then the Setup Helper -Application button). This button changes the permissions of -/usr/bin/klaptop_acpi_helper from "0755 root.root" to "6755 root.root", -and therefore grants all regular users extra power management abilities. -This has obvious security implications, and should not be done on any -system where all users are not trusted absolutely. - -The standard klaptopdaemon changes the binary's permissions using chmod. -However, if an updated version of the Debian klaptopdaemon package -were then to be installed, it would reset the permissions, forcing the -sysadmin to reconfigure after each upgrade. - -The Debian package has therefore been patched to use dpkg-statoverride to -permanently change the permissions of /usr/bin/klaptop_acpi_helper. The -override is removed and permissions reset if the package is removed or -purged. However, if the sysadmin wishes to remove the special permissions -of /usr/bin/klaptop_acpi_helper, they can do so at any time by issuing, -as root, the following commands: - -dpkg-statoverride --remove /usr/bin/klaptop_acpi_helper -chown root:root /usr/bin/klaptop_acpi_helper -chmod 0755 /usr/bin/klaptop_acpi_helper |