Subject: pkg/31547: gnupg needs setuid-bit on Linux
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: None <joel@carnat.net>
List: pkgsrc-bugs
Date: 10/10/2005 20:24:00
>Number:         31547
>Category:       pkg
>Synopsis:       gnupg needs setuid-bit on Linux
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Oct 10 20:24:00 +0000 2005
>Originator:     Joel CARNAT
>Release:        none, using Slackware Linux
>Organization:
-
>Environment:
Linux atheria 2.4.31 #2 Mon Oct 10 08:35:45 CEST 2005 i686 unknown unknown GNU/Linux

>Description:
Installing security/gnupg on Slackware 10.2, I faced the "gpg: Warning: using insecure memory!" bug (http://www.gnupg.org/documentation/faqs.html#q6.1).
>How-To-Repeat:
Install security/gnupg (gnupg-1.4.2) on Linux (2.4.31, slackware 10.2).
Use it.
See it complain.
>Fix:
# ll /usr/pkg/bin/gpg
-r-xr-xr-x  1 root root 772K 2005-10-10 22:07 /usr/pkg/bin/gpg*

# sudo chmod +s /usr/pkg/bin/gpg

# ll /usr/pkg/bin/gpg
-r-sr-sr-x  1 root root 772K 2005-10-10 22:07 /usr/pkg/bin/gpg*

Now it works OK.
PS: I only use it to sign my mail. I didn't check encryption.