[cdesktopenv-devel] running rpcbind without -i (insecure)

[Jon T. <jo...@ra...>]

In IRC yesterday, kpedersen mentioned he had made CDE run under Fedora
17.  He said he had to install the tirpc (Transport Independant RPC)
package, as fedora does not include the rpc facility in their glibc
anymore.

The tirpc runtime seems to already be installed on all of the
ubuntu/kubuntu systems I have installed.  The tirpc lib can use the
/run/rpcbind.sock named socket to issue pmap_set/unset calls, thereby
removing the need to run rpcbind in insecure mode.

I have not made an 'official' patch yet since I don't know whether
this is a solution for linux in general.  I hope so.

At any rate, to try it:

1. install the libtirpc-dev package
2. remove any existing cde installation (rm -rf /usr/dt/*)
3. apply the attached patch (linux only)
4. configure rpcbind to no longer use the -i option.  Restart rpcbind.
5. build/install cde.  I've seen no issues so far.

If it seems to work for everyone I'll make a cleaner patch, and
perhaps allow enabling/disabling in site.def.

Let me know...

-- 
Jon Trulson

"If the Martian rope-a-dope don't get him, he'll get himself, he'll
  come in too fast and punch himself out."
              - one of my brothers, referring to the Curiosity landing.