Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Oct 2002 11:58:32 -0700 (PDT)
From:      Mike Hoskins <mike@adept.org>
To:        Brian Behlendorf <brian@hyperreal.org>
Cc:        Klaus Steden <klaus@compt.com>, <security@FreeBSD.ORG>
Subject:   Re: tar/security best practice (was Re: RE: Is FreeBSD's tar susceptible to this?)
Message-ID:  <20021002115522.S71488-100000@fubar.adept.org>
In-Reply-To: <20021001183010.E58068-100000@yez.hyperreal.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 1 Oct 2002, Brian Behlendorf wrote:
> Oh, that would be a pain, wouldn't it?
> Like someone said, POLA.

In all fairness, taking action that could potentially allow malicious
manipulation of filesystems probably isn't very POLA.  ;)

Really though, I don't see what all the fuss is about.  Someone's said
we'll have an RC3.  I don't understand the huge rush to get new releases
out the door (don't in my own company either).  It'll be released when
it's ready, that's why it's called a 'release'.  If we need one more, or
ten more RCs...  I don't care.  It means things are getting fixed while
we're waiting.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021002115522.S71488-100000>