Afternoon,
I've just been looking over the recent PMB minutes and note this:
"TD noted that one underlying issue was set UID for glexec - the
statement
was that we will be mandated to use set UID and this would particularly
affect sites working with their CompServ Depts (Bristol, Edinburgh,
Cambridge, IC, UCL, Birmingham)."
It sounds rather as though the idea of requiring sites to install glexec
SUID is being resurrected, though elsewhere in the same set of minutes
it
appears that GridPP policy is still that there should be a choice:
The three flavours of glexec should exist as separate binaries and not
as one with a configuration switch. Each of these should satisfy all
package dependencies. e.g., dependencies should express some
requirement
for an abstract "glexec" property, which is satisfied by "glexec-null"
or
"glexec-suid" etc."
Can someone please clarify whether we're being asked to do the
impossible
in installing glexec SUID, or whether the agreed compromise still holds?
Ewan
|