On Sun, Jan 21, 2007 at 06:34:49PM +0100, Tomasz Kłoczko wrote:
Dnia 19-01-2007, pią o godzinie 03:12 -0500, buildsys(a)redhat.com
napisał(a):
> xterm-223-2.fc7
> ---------------
> * Thu Jan 18 2007 Miroslav Lichvar <mlichvar(a)redhat.com> 223-2
> - make xterm binary sgid utempter (#222847)
> - fix font size changes with -fa option (#222340)
> - fix redrawing of internal border (#223027)
> - enable metaSendsEscape resource and set modifyFunctionKeys to 0 by
> default
Moment .. if xterm realy uses libutempter why xterm binary must be sgid
utempter ?
# ls -la /usr/libexec/utempter
total 28
drwx--x--- 2 root utempter 4096 Jan 13 04:05 .
drwxr-xr-x 10 root root 4096 Jan 20 04:03 ..
-rwx--s--x 1 root utmp 9952 Jul 27 22:25 utempter
The idea is, if I understand it correctly, that only selected programs
can execute the binary and modify utmp.
--
Miroslav Lichvar