[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#4673: ppp insecure



Christoph Lameter <clameter@waterf.org> writes:

> I have an issue with several packages that I would like to keep some or
> other form of suid bit on it (netdiag,ppp,debmake).

I adamantly disagree with your whole philosophy of adding suid bits to
random packages, and I really wish you would remove them from all
three of the above.  You're just opening Debian up to a Pandora's box
of security problems.

Programs like sudo and super can handle this behavior in a much better
way - by giving specific users permission to execute specific
commands.


Guy

--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: