TeX 1995 July/TeX CD-ROM July 1995 (Disc 1)(Walnut Creek)(1995).ISO/tex-k/tex-k-archive.past/tex-k-archive.gz/tex-k-archive/[e-mail]_Tue Dec 21 15:15:37 1993.msg

Internet Message Format | 1994-10-11 | 2KB

Received: from phobos.sscl.uwo.ca by cs.umb.edu with SMTP id AA25295
  (5.65c/IDA-1.4.4 for <[e-mail]>); Tue, 21 Dec 1993 20:15:39 -0500
Received: from localhost (localhost [127.0.0.1]) by phobos.sscl.uwo.ca (8.6.4/8.6.4) with SMTP id UAA28900 for [e-mail]; Tue, 21 Dec 1993 20:15:38 -0500
From: John Tucker <[e-mail]>
Message-Id: <[e-mail]>
X-Authentication-Warning: phobos.sscl.uwo.ca: Host localhost didn't use HELO protocol
To: [e-mail]
Subject: Security and MakeTeXPK
Date: Tue, 21 Dec 93 20:15:37 -0500
X-Mts: smtp

When installing TeX, I ran across the problem of MakeTeXPK not being able
to access the directory when I ran it as anything except root.

My possible solution is this:
   Create a group called tex and chown the entire TeX hierarchy to root.tex
   Having done this, I set all read-only files to 644 and all executable
   files to 755 (directories and binaries).

My question is this: If I set MakeTeXPK to setgid when running (2755), do I
introduce a huge gaping security hole? The only users which will be members
of tex would be the installer.

Also, if anyone is interested, I hacked together a replacement MakeTeXPK as
a perl script which figures out magstep from dpi and bdpi. It allows modes
"sun lview NEC CanonCX NEChi LinotypeOneZeroZero" to be used. Let me know
and I'll post it here (lots o interest) or email it.

Happy time off to everyone celebrating whatever holiday they choose to
celebrate at this time of year, and to those who have to work -- TOO BAD :-0


[e-mail]
        Williams and Holland's Law:
        If enough data is collected, anything may be proven by
        statistical methods.