[linux-audio-user] couple of muse questions

[Jack O'Quin]

Robert Jonsson <robert.jonsson at dataductus.se> writes:

> > Yep.. its 0.6.3 and jack is run through qjackctl with realtime option.
> > Muse is compiled with rtcap so it is not suid (thought it was safer..)
> > but if I do change it to suid and then start with -R, it starts okay
> > with no error messages...?? Maybe rtcap does not enable enough realtime
> > capabilities!!?
> 
> This is a possibility, it's a bug in that case, I have a vague memory of 
> something similar being reported some time ago.

Have you tried using the realtime LSM instead of rtcap?  I think it
ought to work, but haven't tested it with Muse, myself.  That is safer
than setuid root, IMHO.

> As for running MusE suid, this is in itself not a problem unless your machine 
> is compromised, in which case you someone use it to lock up the machine 
> (which is equally true for rtcap:ed muse). The prospect that someone has 
> bothered to find a security hole in MusE to gain control of a machine through 
> it's suid usage seems a tad unlikely.

There are a few people on the net with way too much time on their
hands.  :-(

Regards,
-- 
  joq