also sprach Curt Manucredo <curtm2@yahoo.de> [2007.02.15.1328 +0000]: > request client. since urequestd does not execute any process > unless it comes from an urequest-client, all verifications are > done in the urequest client program. this includes user and group > verification as well as checking if the request even exists. This sounds like a bad idea. All I have to do is imposter as urequest-client and I can execute anything. What's the added benefit over, say, sudo? -- Please do not send copies of list mail to me; I read the list! .''`. martin f. krafft <madduck@debian.org> : :' : proud Debian developer, author, administrator, and user `. `'` http://people.debian.org/~madduck - http://debiansystem.info `- Debian - when you have better things to do than fixing systems i'd give my right arm to be ambidextrous.
Attachment:
signature.asc
Description: Digital signature (GPG/PGP)