[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: setuid/setgid binaries contained in the Debian repository.

On Fri, Aug 01, 2003 at 11:26:57AM -0400, Stephen Frost wrote:

> * Matt Zimmerman (mdz@debian.org) wrote:
> > I absolutely support this idea.  All set[ug]id setups should be reviewed
> > before they go in the archive, and I volunteer to do the review (though I
> > hope that others will help).  Does this need a proposal to go into policy
> > with the same force as the existing pre-depends verbiage?
> It probably should.  I'd be willing to say we might want a seperate list
> for this too.  I'm willing to help with the review but I tend to skim
> d-d..

I think debian-security would be fine, maybe with a special Subject tag.

 - mdz

Reply to: