From owner-freebsd-arch Wed Sep 19 10: 9: 4 2001 Delivered-To: freebsd-arch@freebsd.org Received: from mail152.nifty.com (mail152.nifty.com [202.248.37.145]) by hub.freebsd.org (Postfix) with ESMTP id B6B9537B41D for ; Wed, 19 Sep 2001 10:08:59 -0700 (PDT) Received: from chrysanthe.oikumene.gcd.org by mail152.nifty.com (8.11.4+3.4W/3.7W-10/13/99) with SMTP id f8JH8wT15893 for ; Thu, 20 Sep 2001 02:08:58 +0900 Received: (qmail 3862 invoked from network); 19 Sep 2001 17:08:57 -0000 Received: from chrysanthe.oikumene.gcd.org (HELO localhost) (@192.168.0.12) by chrysanthe.oikumene.gcd.org with SMTP; 19 Sep 2001 17:08:57 -0000 To: freebsd-arch@FreeBSD.ORG Subject: Re: Moving UUCP to ports From: Hiroo ONO (=?iso-2022-jp?B?GyRCPi5MbjQyQDgbKEI=?=) In-Reply-To: <20010917194519.A39672@xor.obsecurity.org> References: <20010917194519.A39672@xor.obsecurity.org> X-Mailer: Mew version 1.94.1 on Emacs 20.7 / Mule 4.0 (HANANOEN) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <20010920020856N.hiroo@oikumene.gcd.org> Date: Thu, 20 Sep 2001 02:08:56 +0900 X-Dispatcher: imput version 20000228(IM140) Lines: 28 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello. As one of uucp users, who are supposed to be in the threat of extinction :-), I do not oppose to removing uucp from the base system as long as it remains in the port tree. > That's apparently widely used functionality. My original proposed > patch restricted --config/-I to root, but ache told me lots of people > need that to work. How about making this feature selectable at compile time, as Cy Shubert suggested. If you leave uucp in the base system, the default should be the secure version, but if it is in the port tree, setting the default to current insecure version and just prompting "it has a security hole." and showing how to make the secure version may be sufficient. I think it may be a demerit to uucp user who will have to do a little more operation at install time, but it has the merit that it contents uucp users who still use --config/-I option other than root, and uucp users who do not use this option and want a secure one, and at last non uucp users who do not want security hole in the system they use (except some people who insist on having uucp in the base system if you decide to move the uucp to port :-p). If you remove uucp from the base system and move it to ports, I want to be informed (by UPDATING or/and RELNOTES, etc.), but it is not important whether it is in the base system or in the port tree. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message