Re: More Debian v1.2 things...

[lists@lina.inka.de (Bernd Eckenfels)]

Hi,

> It should not be setuid root.  This would be too big of a security
> hole.  Any package could install a setuid root sh.

Any Package can install suid root shells already, since dpkg can only be run
be root, anyway.

Greetings
Bernd

PS: /va/log/setuid.{today,changes}
-- 
  (OO)      -- Bernd_Eckenfels@Wittumstrasse13.76646Bruchsal.de --
 ( .. )   ecki@{lina.inka.de,linux.de}  http://home.pages.de/~eckes/
  o--o     *plush*  2048/A2C51749  eckes@irc  +4972573817  *plush*
(O____O)       If privacy is outlawed only Outlaws have privacy

--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com