About zhcon setuid issue.

[Hu Zheng]

Yes, I will try to learn selinux and create a patch for zhcon and
selinux :)
Thanks for your idea :)

在 2007-04-03二的 11:14 +0300，Manuel Wolfshant写道：
> Hu Zheng wrote:
> > The zhcon package was added to FC6 and FC7 extra recently. But there is
> > a issue of it that we may need to notice.
> >
> > Because it need to access /dev/fb0 and so on, it need the setuid
> > permission, so normal users can use it too. This bring the security
> > risk. But for users' convenience, I didn't remove this setuid
> > permission.
> > It is still better don't install zhcon by default. Let's user install it
> > manually.
> >
> > Maybe we can use ACL to controll this?
> >   
> To me it looks like a perfect job for SElinux. But I might be wrong, I 
> am just learning...