Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Apr 2003 13:17:46 -0500
From:      Juli Mallett <jmallett@FreeBSD.org>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/release Makefile src/release/scripts crypto-install.sh
Message-ID:  <20030430131746.A7383@FreeBSD.org>
In-Reply-To: <20030430181603.GD84302@rot13.obsecurity.org>; from kris@obsecurity.org on Wed, Apr 30, 2003 at 11:16:03AM -0700
References:  <200304301754.h3UHsJ21004574@repoman.freebsd.org> <20030430181603.GD84302@rot13.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
* Kris Kennaway <kris@obsecurity.org> [ Date: 2003-04-30 ]
	[ w.r.t. Re: cvs commit: src/release Makefile src/release/scripts crypto-install.sh ]
> On Wed, Apr 30, 2003 at 10:54:19AM -0700, Mark Murray wrote:
> > markm       2003/04/30 10:54:19 PDT
> > 
> >   FreeBSD src repository
> > 
> >   Modified files:
> >     release              Makefile 
> >     release/scripts      crypto-install.sh 
> >   Log:
> >   KerberosIV removal. Also crunch down the "krb5" distribution into
> >   "secure".
> 
> Hmm, is it really a good idea to combine crypto and krb5?  krb5 is, I
> suspect, a rarely-used feature in the wild.

When I reported that k5su could be used to get around the wheel
group limitations of su, I was pointed to the fact that they are
(were) different distributions and as such, people isntalling
k5su setuid would know what to expect.  That has been dealt with,
now, but regardless I think this is backwards from such an idea.
-- 
juli mallett. email: jmallett@freebsd.org; aim: bsdflata; efnet: juli;



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030430131746.A7383>