From owner-cvs-all@FreeBSD.ORG  Wed Apr 30 11:17:46 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 931)
	id D615F37B401; Wed, 30 Apr 2003 11:17:46 -0700 (PDT)
Date: Wed, 30 Apr 2003 13:17:46 -0500
From: Juli Mallett <jmallett@FreeBSD.org>
To: Kris Kennaway <kris@obsecurity.org>
Message-ID: <20030430131746.A7383@FreeBSD.org>
References: <200304301754.h3UHsJ21004574@repoman.freebsd.org>
	<20030430181603.GD84302@rot13.obsecurity.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20030430181603.GD84302@rot13.obsecurity.org>;
	from kris@obsecurity.org on Wed, Apr 30, 2003 at 11:16:03AM -0700
X-Title: Code Maven
X-Towel: Yes
X-Negacore: Yes
X-Authentication-Warning: localhost: juli pwned teh intarweb
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: Mark Murray <markm@FreeBSD.org>
cc: cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/release Makefile src/release/scripts
	crypto-install.sh
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2003 18:17:47 -0000

* Kris Kennaway <kris@obsecurity.org> [ Date: 2003-04-30 ]
	[ w.r.t. Re: cvs commit: src/release Makefile src/release/scripts crypto-install.sh ]
> On Wed, Apr 30, 2003 at 10:54:19AM -0700, Mark Murray wrote:
> > markm       2003/04/30 10:54:19 PDT
> > 
> >   FreeBSD src repository
> > 
> >   Modified files:
> >     release              Makefile 
> >     release/scripts      crypto-install.sh 
> >   Log:
> >   KerberosIV removal. Also crunch down the "krb5" distribution into
> >   "secure".
> 
> Hmm, is it really a good idea to combine crypto and krb5?  krb5 is, I
> suspect, a rarely-used feature in the wild.

When I reported that k5su could be used to get around the wheel
group limitations of su, I was pointed to the fact that they are
(were) different distributions and as such, people isntalling
k5su setuid would know what to expect.  That has been dealt with,
now, but regardless I think this is backwards from such an idea.
-- 
juli mallett. email: jmallett@freebsd.org; aim: bsdflata; efnet: juli;