Re: [PATCH] Allow update-game-score to run sgid instead of suid.

[Ulrich Mueller <ulm@gentoo.org>]

>>>>> On Thu, 05 Feb 2015, Stefan Monnier wrote:

>> So, any objections against changing the default, as indicated above?

> I'm OK with changing to setgid instead of setuid, yes (I don't have
> a strong opinion either way on this).

A small problem with this is that there seems to be no portable
command to check for existence of a group. (There is getent(1) in
GNU/Linux and {Free,Open,Net}BSD but it's not specified by POSIX.)

But I guess we can set the default in configure and try to chgrp to it
during make install. It fails softly, so installation won't abort if
the group doesn't exist.

> As for defaulting to "neither setuid nor setgid", I'm less convinced.
> After all, I'd expect that most cases where Emacs is built "by hand"
> (rather than installed from a distro), the build will be done by
> a non-privileged user, so it will already end up being neither
> setgid/setuid.  IOW changing the default will end up catching distros
> by surprise with no real upside.

There's a note in etc/NEWS ... But point taken.

Ulrich