Robert Jonsson <robert.jonsson@xxxxxxxxxxxxx> writes: > > Yep.. its 0.6.3 and jack is run through qjackctl with realtime option. > > Muse is compiled with rtcap so it is not suid (thought it was safer..) > > but if I do change it to suid and then start with -R, it starts okay > > with no error messages...?? Maybe rtcap does not enable enough realtime > > capabilities!!? > > This is a possibility, it's a bug in that case, I have a vague memory of > something similar being reported some time ago. Have you tried using the realtime LSM instead of rtcap? I think it ought to work, but haven't tested it with Muse, myself. That is safer than setuid root, IMHO. > As for running MusE suid, this is in itself not a problem unless your machine > is compromised, in which case you someone use it to lock up the machine > (which is equally true for rtcap:ed muse). The prospect that someone has > bothered to find a security hole in MusE to gain control of a machine through > it's suid usage seems a tad unlikely. There are a few people on the net with way too much time on their hands. :-( Regards, -- joq
