Subject: Re: pkg/24626: SU_CMD used too much for bin-install
To: None <netbsd-bugs@netbsd.org>
From: Christian Biere <christianbiere@gmx.de>
List: netbsd-bugs
Date: 03/01/2004 18:08:33
reed@reedmedia.net wrote:
> Only use SU_CMD for actual pkg_add step or for install and package steps.

I don't see why I would do either of them as root. /var/db/pkg doesn't
have to be root-owned. /usr/pkgsrc/ doesn't have to be root:wheel-owned
either. It doesn't make things safer because - you've already guessed it -
you run everything which writes to it as root anyway...
Using a special user bin or pkgsrc and group is a much better idea.
The only reason for using SU_CMD should be chown, chgrp, chmod etc.
for special needs like the s-bit or so.

--=20
Christian
=20
As you can see, this a signature. It's not related to the contents of the
mail in any way. But you probably won't listen to me anyway, will you?