From owner-freebsd-security@FreeBSD.ORG Thu Jul 21 16:00:40 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A0EE516A44E; Thu, 21 Jul 2005 16:00:40 +0000 (GMT) (envelope-from keramida@freebsd.org) Received: from rosebud.otenet.gr (rosebud.otenet.gr [195.170.0.94]) by mx1.FreeBSD.org (Postfix) with ESMTP id EC62A43D53; Thu, 21 Jul 2005 16:00:02 +0000 (GMT) (envelope-from keramida@freebsd.org) Received: from beatrix.daedalusnetworks.priv (aris.bedc.ondsl.gr [62.103.39.226]) by rosebud.otenet.gr (8.13.4/8.13.4/Debian-1) with SMTP id j6LG00Gq012696; Thu, 21 Jul 2005 19:00:01 +0300 Received: from beatrix.daedalusnetworks.priv (localhost [127.0.0.1]) by beatrix.daedalusnetworks.priv (8.13.3+Sun/8.13.3) with ESMTP id j6LG00Dq020545; Thu, 21 Jul 2005 19:00:00 +0300 (EEST) Received: (from keramida@localhost) by beatrix.daedalusnetworks.priv (8.13.3+Sun/8.13.3/Submit) id j6LG001C020544; Thu, 21 Jul 2005 19:00:00 +0300 (EEST) Date: Thu, 21 Jul 2005 19:00:00 +0300 From: Giorgos Keramidas To: "Simon L. Nielsen" Message-ID: <20050721160000.GA20526@beatrix.daedalusnetworks.priv> References: <42DCC503.5000408@ludd.ltu.se> <20050719213356.GA1614@gothmog.gr> <20050721101331.GB854@trit.org> <20050721102012.GG16179@beatrix.daedalusnetworks.priv> <20050721153202.GF880@zaphod.nitro.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050721153202.GF880@zaphod.nitro.dk> X-Mailman-Approved-At: Fri, 22 Jul 2005 14:41:00 +0000 Cc: freebsd-security@freebsd.org Subject: Re: Adding OpenBSD sudo to the FreeBSD base system? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2005 16:00:41 -0000 On 2005-07-21 17:32, "Simon L. Nielsen" wrote: >On 2005.07.21 13:20:12 +0300, Giorgos Keramidas wrote: >> My thoughts exactly. The only thing I'd like to add is that the port is >> that importing it to the base system would probably require someone who >> steps up and offers to maintain it as bugfixes/features are noticed in >> the upstream source. But, I guess, this is more or less obvious. > > Personally I have a preference for not having it in the base system > for the simple reason that we would need to make security advisories > for it... and while I don't remember any grave holes, there certainly > have been a few holes over the last year. True. Thanks for the followup from the secteam's perspective :-)