Stuart Henderson <s...@spacehopper.org> writes: > On 2024/07/08 14:29, Manuel Giraud wrote: >> Stuart Henderson <s...@spacehopper.org> writes: >> >> > I believe it should be setgid auth (mode 2755 or 2555). >> >> I have the same error message with the following settings: >> >> $ ls -l /tmp/xscreensaver/bin/xscreensaver >> -r-xr-sr-x 1 root auth 150616 Jul 8 11:16 >> /tmp/xscreensaver/bin/xscreensaver* >> $ ls -l /tmp/xscreensaver/libexec/xscreensaver/xscreensaver-auth >> -r-xr-sr-x 1 root auth 522400 Jul 8 11:16 >> /tmp/xscreensaver/libexec/xscreensaver/xscreensaver-auth* >> -- >> Manuel Giraud >> > > oh you're running it from /tmp? i bet that is nosuid.
Thanks that was the case 😅… but now I have some work left to do because 'xscreensaver-auth' quickly calls a 'disavow_privileges' function that reverts to run as user/user. -- Manuel Giraud
