[MacPorts] #37766: htop: binary should be installed SGID procmod, not SUID root

MacPorts noreply at macports.org
Wed Jan 23 12:15:18 PST 2013


#37766: htop: binary should be installed SGID procmod, not SUID root
-----------------------------+--------------------------------
 Reporter:  michael.klein@…  |      Owner:  macports-tickets@…
     Type:  defect           |     Status:  new
 Priority:  Normal           |  Milestone:
Component:  ports            |    Version:  2.1.2
 Keywords:  haspatch         |       Port:  htop
-----------------------------+--------------------------------
 when installing as root, htop is installed SUID root, which allows any
 user to kill arbitrary processes.

 instead, htop should be installed SGID procmod.

 The attached patch adds a "procmod" variant (set as default) which does
 exactly this. -procmod should only be used when installing without root
 privileges.

-- 
Ticket URL: <https://trac.macports.org/ticket/37766>
MacPorts <http://www.macports.org/>
Ports system for Mac OS


More information about the macports-tickets mailing list