Friday, October 19, 2007

Setting Permissions

Quake and QuakeWorld servers can be run by any user. The Quake clients, however, need access to your
sound and graphics cards, which requires privileges that normal users don't have. One (bad) way to deal with
this is to always run Quake as root. Responsible system administrators will cringe at this filthy suggestion.
Making the Quake binaries setuid root is a more acceptable solution. Quake can then be run by regular users
and still have the privileges it needs to access the sound and graphics devices. Setuid presents a security risk,
though. A clever user could exploit a bug or security hole in Quake to gain root access to your system. Of
course, if you don't run a multiāˆ’user system, this is may not be a big concern.
squake is the only Quake client that must be run with root permissions. With a little work, you can run the
X and GL clients without setuid. Running X and GL games without setuid in the Tips and Tricks section tells
how to make this work.
If you plan to run squake, make it setuid root with the following commands:
chown root squake
chmod 4755 squake
If you've decided it's ok to run quake.x11 and glquake setuid root on your system, you can repeat the
above commands for these binaries as well.

Labels: