Why setuid binary? about system76-scheduler HOT 9 CLOSED

@mmstick please make a PR to use 0755 as the mode

from system76-scheduler.

It only requires to be run as root by systemd

from system76-scheduler.

Can you please elaborate a little more on that and answer the setuid question?

from system76-scheduler.

Not much to add. It requires root because the daemon adjusts processes of all users, and some of which is setting a higher priority than permitted by the non-root user.

from system76-scheduler.

Okay, but why is it installed with setuid bit? This has serious security implications, it allows any user to run system76-scheduler with root privileges.

from system76-scheduler.

I agree with @jirutka it should not be setuid

from system76-scheduler.

@jirutka how do you have it installed? On my Pop!_OS install it is not setuid

from system76-scheduler.

$ ls -lah /usr/bin/system76-scheduler
-rwxr-xr-x 1 root root 5.7M Jun  7 03:43 /usr/bin/system76-scheduler

from system76-scheduler.

justfile:41:

install -Dm04755 target/{{target}}/{{binary}} {{target_bin}}

from system76-scheduler.