Hello, I am using umask 027 on my Gentoo boxes, and setgid bit set on a few directories crucial to userpriv-enabled merges. This way, I do not have to worry about running e.g. layman through 'sg' or similar tools, as all newly-created files inherit portage group ownership, and newly-created directories inherit the setgid bit.
I would like to be able to use similar solution for compiled kernel sources, i.e. through setting the setgid bit on /usr/src. But in fact it is impossible as portage forces setting it's own permissions on all installed files, thus newly-installed kernel sources do not inherit the parent group ownership nor the setgid bit. Now the question is: should such behaviour be considered really correct and necessary? In my opinion, if user sets setuid/setgid on a parent directory, shklee knows what shklee is doing and emerge should not override this system-specific ownership inheritance. -- Best regards, Michał Górny <http://mgorny.alt.pl> <xmpp:mgo...@jabber.ru>
signature.asc
Description: PGP signature