[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SECURITY PROBLEM: autofs [all versions]



On Tue, Jul 04, 2000 at 12:11:01 -0500,
David Starner <dvdeug@x8b4e53cd.dhcp.okstate.edu> wrote:
[...]
> If you remove it, it will get replaced the next time you upgrade.

this behaviour certainly is a bug. removing or renaming the links in
/etc/rc?.d/ is the canonical way to stop the boottime start of a daemon 
on _every_ unix system with a sysv init but debian.

breaking unix tradition is not a smart decision.

> The
> correct way to handle is to hack the init.d script not to run it. Pretty
> much any other way is wrong. 

this is not correct. if i put an "exit 0" in front of the init.d script, i
can't start the daemon manually, which is what i might want to do from time
to time. so "to hack the init.d script not to run" certainly ain't the
correct way.

for now, debian is pretty much broken in this regard.

-- 
Thomas 'Mike' Michlmayr  | ignorami: n: The BOFH art of folding problem 
<mike+sig@cluon.priv.at> |           lusers into representational shapes.

Attachment: pgp35Id5X19pZ.pgp
Description: PGP signature


Reply to: