Re: debian: user-request-daemon (it could solve some problems)
On Tue, Feb 27, 2007 at 09:21:56PM +0100, Curt Manucredo wrote:
[...]
> but anyway, next time i can not fall asleep i will ask YOU to read ME
> some manpages ;-)
[...]
My apologies for sounding harsh, but these are basic security
concepts that are fundamental to being able to safely provide
privileged programmatic access to resources as another user. That
sort of application is a serious security risk waiting to happen,
and is in no way a task for a novice programmer. Given the years of
testing and fixes applied to sudo to try and make it a safe
solution, you would do well to review its current source and
historical security holes so as to be at least slightly more certain
you're not making the same mistakes they did (learning from the
past). Distributing software designed to provide controlled
privilege escalation is not something to be taken lightly, though
obviously what you do on your computer is none of my business.
--
{ IRL(Jeremy_Stanley); PGP(9E8DFF2E4F5995F8FEADDC5829ABF7441FB84657);
SMTP(fungi@yuggoth.org); IRC(fungi@irc.yuggoth.org#ccl); ICQ(114362511);
AIM(dreadazathoth); YAHOO(crawlingchaoslabs); FINGER(fungi@yuggoth.org);
MUD(fungi@katarsis.mudpy.org:6669); WWW(http://fungi.yuggoth.org/); }
Reply to: