Bug#89433: I want to adopt osh
On Thu, Jan 17, 2002 at 11:02:28PM +0900, Oohara Yuuma wrote:
> I want to adopt osh (#89433), but I am not a Debian developer,
> so I can't change the title of the wnpp bug until I find a sponsor.
> If you are interested, please sponsor me.
>
> My .deb of osh is available at:
> http://www.interq.or.jp/libra/oohara/debian-unofficial/osh_1.7.orig.tar.gz
> http://www.interq.or.jp/libra/oohara/debian-unofficial/osh_1.7-9.diff.gz
> http://www.interq.or.jp/libra/oohara/debian-unofficial/osh_1.7-9.dsc
> http://www.interq.or.jp/libra/oohara/debian-unofficial/osh_1.7-9_i386.deb
>
> Note that osh is a setuid root shell and it does *NOT* drop root privilege
> when it executes a command. Be extremely careful when you configure or
> use it. (osh is installed in /usr/sbin/osh and its permission is 4754.
> It is not for a normal user.)
IMHO this kind of programs should be avoided in any sane distribution.
We have already periodic problems with a program like sudo which has potentially
many levels of control over its use/abuse. No sysadmin with a grain of salt
in his mind could install this kind of monsters...
Please, find any other sane orphaned pkg and you will have your sponsor in me.
--
Francesco P. Lovergine
Reply to: