[linux-audio-user] jack and setuid

Paul Davis paul at linuxaudiosystems.com
Wed Nov 2 08:02:24 EST 2005

> bash-3.00#  chmod ugo+s /usr/local/bin/jackd
> bash-3.00# exit
> bash-3.00$ ls -la /usr/local/bin/jackd
> -rwsr-sr-x  1 root root 206476 2005-11-01 15:23 /usr/local/bin/jackd

this is a really, really, really bad thing to do. there is no reason to
run jackd as root or set it up as setuid root. you should be using some
kernel-based technique that allows you to get realtime priviledges
without being root (capabilities on 2.4 kernels, realtime-lsm for 2.6.12
or lower, or the new rtlimits code for 2.6.13 or above). if you cannot
do that, then just run without realtime or explicitly run all JACK apps
as root. do NOT install random, non-security related applications as
setuid root.


More information about the Linux-audio-user mailing list