[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#504043: closed by maximilian attems <max@stro.at> (Re: initramfs: bail to shell on error: insecure default)



On Sun, Dec 14, 2008 at 11:27:15PM +0000, Debian Bug Tracking System wrote:
> From: maximilian attems <max@stro.at>
> To: 504043-done@bugs.debian.org
> 
> yes we try to be user friendly.

Nice paraphrase.

> the bailout does not happen in usual conditions.

Well, it does, for example, easily happen on SATA only systems when you
plug an USB stick in, since the stick becomes sda.

> see longer postings in d-kernel and use panic if you don't want
> that for a secured env.

Yes, panic=0 triggers the side-effect without changing the main-effect.

> not a bug but a design decision, closing.

Well, it's finally your decision. No offense meant, for me it was just
important to warn about the security flaw in a documented manner. Now I
can lean back and wait having a clear conscience :)
Just try to keep in mind that lots of past an present security flaws are
simply side-effects of having user-"friendly" insecure defaults.


Mario
-- 
Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music.
                                  -- Kristian Wilson, Nintendo Inc, 1989

Attachment: signature.asc
Description: Digital signature


Reply to: