Subject: Re: Unprivileged user per-package custom groups
To: Roland Illig <rillig@NetBSD.org>
From: None <firstname.lastname@example.org>
Date: 10/14/2007 20:35:08
Roland Illig writes:
> email@example.com wrote:
> > I propose the following change. Currently mk/unprivileged.mk will
> > override all per-package groups. This is not always desirable - in
> > fact it can be a real nuisance :)
> > The patch below allows a package to use its custom group so long as
> > the group is in the UNPRIVILEGED_GROUPS list.
> > In addition, the value of UNPRIVILEGED_GROUPS is defaulted to all the
> > groups the installing user is a member of, in a similar mold to
> > UNPRIVILEGED_GROUP and UNPRIVILEGED_USER.
> The patch for itself looks good. Can you provide an example where you
> want to use this feature? (Probably mainly for adding the "games" group,
> if I guess right.)
A perfect example. But I try and use groups as widely as possible,
since I do all installations as an unprivileged user. If a package
requires just a group then it makes the installation process much
easier, I just add the group to all my "pkgsrc" users (pkgsrc1,
The one that was annoying me was "mail/dspam". In /etc/mk.conf I have:
Usually bin/dspam is installed setuid "dspam", but I find setgid
adequate - it doesn't really need to be setuid.