[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#554893: startup script should be more careful with chown -R



On Sun, Nov 08, 2009 at 06:11:20PM +0300, Michael Tokarev wrote:
> reopen 554893
> thanks
> 
> [Cc'ing debian-devel because it's wrong to call valid claims "bogus"
> and closing security bugs without any changes, especially since the
> issue at hand in the package actually is bogus from the beginning]

For all I care you cannot exploit this bug, unless you can make the nsd
user write symlink to files there. If this is asking for trouble, and my
next upload is going to fix that, it's not really worth the fuss about
cc-ing d-d@...
-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org

Attachment: signature.asc
Description: Digital signature


Reply to: