Bug#859318: pyracerz: Games crashes with Permission denied when writing highscores

[James Cowgill]

Hi,

On 02/04/17 18:31, Markus Koschany wrote:
> Am 02.04.2017 um 18:29 schrieb James Cowgill:
> [...]
>> The point is that no user should ever need to be a member of the games
>> group and I expect 99% of all users who want to run pyracerz are not.
> 
> I don't see any problem here. This is certainly a better solution than
> making an arch:all game arch:any and my answer definitely did resolve
> the issue at hand.
> 
>> By your argument, why does pyracerz's postinst contain code to make
>> pyracerz setgid?
> 
> Probably because someone copied this code from another game that writes
> high score files to /var/games.

Hmm so I see this patch is what moved the highscores to /var/games which
would fit with the setgid code being intentionally added:
https://sources.debian.net/src/pyracerz/0.2-8/debian/patches/misc.patch/

The bits of that patch (and the others) which move the config into
/var/games should be reverted. I still firmly believe that recommending
that users add themselves to the games group is wrong.

James

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-games-devel/attachments/20170402/30bf99f4/attachment.sig>