[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug 26827 again (about secure-su)

On Wed, Oct 21, 1998 at 02:42:28AM -0000, rcw@rcw.oz.net wrote:
> Kevin Dalley fixed findutils 4.1-30 *more than a month ago*
> to not use '-s /bin/sh'. Not that he updated bug #26827, but we'll overlook
> that :)

Thanks for pointing that out. It is really important IMO to see that
secure-su does not break any essantial package.

> All that has to be done is have secure-su fixed to Conflict: with findutils
> 4.1-29, the only version released with '-s /bin/sh'.


Dr. Michael Meskes      | Th.-Heuss-Str. 61, D-41812 Erkelenz | Go SF49ers!
Senior-Consultant       | business: Michael.Meskes@mummert.de | Go Rhein Fire!
Mummert+Partner         |  private: Michael.Meskes@usa.net    | Use Debian
Unternehmensberatung AG |           Michael.Meskes@gmx.net    | GNU/Linux!

Reply to: