[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Accepted efingerd 1.3.2 (i386 source)



On Tue, Mar 19, 2002 at 12:02:14PM +0100, Wichert Akkerman wrote:
> Previously Radovan Garabik wrote:
> > It is a security fix - read bug#137109, I already had(private) discussion
> > with Martin Schulze about this.
> 
> As the bugreport already said that feature is pretty much the only
> reason one would install efingerd, and that feature is now disabled.
> It would be better if efingerd used its own user instead of nobody

it uses in woody, but to change this would be not appropriate 
for potato

> but otherwise I'm not convinced we should make this change in potato.
> 

neither was I but way too many people were bugging me about this.
And it is true that administrator unaware of this feature can get
into troubles


-- 
 -----------------------------------------------------------
| Radovan Garabik http://melkor.dnp.fmph.uniba.sk/~garabik/ |
| __..--^^^--..__    garabik @ melkor.dnp.fmph.uniba.sk     |
 -----------------------------------------------------------
Antivirus alert: file .signature infected by signature virus.
Hi! I'm a signature virus! Copy me into your signature file to help me spread!



Reply to: