© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0f7b58d
(Get the code!)
The Debian package intentionally does not set this program as SUID root. Linux platforms allow users to lock small amounts of system memory which makes the SUID bit unnecessary. The closet possibility under Solaris seems to involve RBAC and the proc_lock_memory privilege:
% ppriv -lv proc_lock_memory
proc_lock_memory
Allows a process to lock pages in physical memory.
Setting this binary as SUID root when upstream does not may be a bad idea since root exploits may not be closely tracked. I am interested to hear if there is a better idea on how to implement this without suid and potentially using Solaris mechanisms like RBAC.