Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #280523 > unrolled thread

little help with firetools

Back to article view | Back to linux.debian.user

Contents

  little help with firetools fxkl47BF@protonmail.com - 2025-07-01 17:30 +0200
    Re: little help with firetools Jeffrey Walton <noloader@gmail.com> - 2025-07-01 20:40 +0200
      Re: little help with firetools Nicolas George <george@nsup.org> - 2025-07-01 21:30 +0200

#280523 — little help with firetools

on debian 11 i just install firetools and firejail
docs say both are setuid
firejail works, firetools doesn't
firejail is setuid, firetools isn't
if i sudo chmod u+s /usr/bin/firetools i get

FATAL: The application binary appears to be running setuid, this is a security hole.
Aborted

is this a problem wth the firetools package

[toc] | [next] | [standalone]

#280527

On Tue, Jul 1, 2025 at 2:29 PM <fxkl47BF@protonmail.com> wrote:
>
> on debian 11 i just install firetools and firejail
> docs say both are setuid
> firejail works, firetools doesn't
> firejail is setuid, firetools isn't
> if i sudo chmod u+s /usr/bin/firetools i get
>
> FATAL: The application binary appears to be running setuid, this is a security hole.
> Aborted
>
> is this a problem wth the firetools package

I suspect (but don't know) that firetools is a shell script, while
firejail is a compiled application.

Generally speaking, it is Ok to setuid on a compiled application (lots
of handwaiving). However, setuid on a script is considered a security
flaw.

Jeff

[toc] | [prev] | [next] | [standalone]

#280528

Jeffrey Walton (HE12025-07-01):
>		   However, setuid on a script is considered a security
> flaw.

Was. Now it just does not have any effect.

Regards,

-- 
  Nicolas George

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web