1
1
Template: muse/muse-setuid
4
Description: Do you want the MusE binary to be setuid root?
5
For a good timing MusE needs to set the real time clock
6
(/dev/rtc) to a higher rate. This is only possible if the
7
binary is setuid root. However this might open a security
8
hole on your system since it is hard to audit the MusE code for
9
securitiy holes such as buffer-overruns. Please read README.Debian
10
for further information.
4
_Description: Do you want MusE to run with superuser rights?
5
For a good timing MusE needs to set the real time clock (/dev/rtc) to a
6
higher clock rate, and raise its scheduling priority. Usually, only the
7
root user is allowed to do this. MusE can be installed "suid-root", so
8
that it always runs with superuser capabilities. In such a setup, ordinary
9
users can twist the clock rate as well. However, this is a bad idea in
10
general because large applications like MusE most definitely contain
11
security holes that a local user might exploit to gain access to the root
12
If you intend to use MusE for timing-sensible recordings you should
13
consider to use a computer which is not (permanently) connected to
14
a network for this purpose. In this case it is safe to say yes here
15
and install MusE setuid root.
16
Description-de: Soll MuseE setuid root laufen?
17
F�r ein gutes Timing ist es notwendig, da� MusE die Echtzeituhr
18
auf eine h�here Rate setzt. Dies geht nur, wenn das Programm
19
mit root-Rechten l�uft (setuid root). Diese Vorgehensweise ist
20
allerdings ein potenzielles Sicherheitsproblem, weil der Code
21
von MusE scher auf Sicherheitsl�cken zu �berpr�fen ist.
23
Wenn Sie MusE f�r Timing-kritische Aufnahmen einsetzen wollen, dann
24
sollten Sie daf�r einen Computer ohne (permanenten) Netzwerkzugang
25
verwenden. In diesem Fall sollte es unproblematisch sein, hier mit
26
Ja (Yes) zu antworten um MusE als setui root zu installieren.
14
If you intend to use MusE for timing-sensitive recordings, make sure you
15
setup a computer with only a few trusted local users, preferrably no
16
network connection, and give an affirmative answer to this question.