From owner-freebsd-current@FreeBSD.ORG  Sat Jul 23 23:30:39 2005
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
X-Original-To: freebsd-current@freebsd.org
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0B8F516A421;
	Sat, 23 Jul 2005 23:30:39 +0000 (GMT) (envelope-from imp@bsdimp.com)
Received: from harmony.village.org (vc4-2-0-87.dsl.netrack.net [199.45.160.85])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5CAB043D53;
	Sat, 23 Jul 2005 23:30:38 +0000 (GMT) (envelope-from imp@bsdimp.com)
Received: from localhost (localhost.village.org [127.0.0.1])
	by harmony.village.org (8.13.3/8.13.3) with ESMTP id j6NNU8nr023542;
	Sat, 23 Jul 2005 17:30:08 -0600 (MDT) (envelope-from imp@bsdimp.com)
Date: Sat, 23 Jul 2005 17:31:00 -0600 (MDT)
Message-Id: <20050723.173100.123341239.imp@bsdimp.com>
To: grog@lemis.com
From: "M. Warner Losh" <imp@bsdimp.com>
In-Reply-To: <20050723230711.GD842@wantadilla.lemis.com>
References: <20050723064449.GZ842@wantadilla.lemis.com>
	<20050723.130941.93453281.imp@bsdimp.com>
	<20050723230711.GD842@wantadilla.lemis.com>
X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Cc: dougb@freebsd.org, freebsd-current@freebsd.org
Subject: Re: cvs commit: src/games/fortune/fortune fortune.c
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Jul 2005 23:30:39 -0000

In message: <20050723230711.GD842@wantadilla.lemis.com>
            "Greg 'groggy' Lehey" <grog@lemis.com> writes:
: > If Rush gets more quotes than normal, and that annoys people to find
: > the real problem, we shouldn't mask it.  It is a really bad choice
: > from a security point of view.
: 
: So it's better to back perfectly valid code rather than to look for
: the real culprit?  What kind of security is that?

I'm saying we should fix the real, underlying problem.  Kludging
around the symptom, like you did with fortune, only prolongs the time
we have the real, underlying problem.

Warner