Re: What to do about checksecurity
On 19-Mar-98, 22:03 (CST), Steve Greenland <stevegr@master.debian.org> wrote:
> On 18-Mar-98, 23:21 (CST), "Gregory S. Stark" <gsstark@mit.edu> wrote:
> >
> > For NFS and AFS, why not just log a message listing volumes mounted without
> > nosetuid and nodev. They're security issues regardless of what files happen to
> > exist on them and they should be audited by the server, not by every client
> > that happens to have them mounted.
>
> You know, that's the best general solution I've heard yet, and I'm
> embarassed not to have thought of it. I think I'll do something like
> this for the next release of cron.
I've put this into -45, which I'm uploading today. You can get the
old behaviour by editing checksecurity.conf, and uncommenting the
indicated line.
Steve
--
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: