From owner-cvs-all Mon Apr 16 9:41:21 2001 Delivered-To: cvs-all@freebsd.org Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42]) by hub.freebsd.org (Postfix) with ESMTP id E9ABD37B59E; Mon, 16 Apr 2001 09:41:12 -0700 (PDT) (envelope-from ache@nagual.pp.ru) Received: (from ache@localhost) by nagual.pp.ru (8.11.3/8.11.3) id f3GGf8n03532; Mon, 16 Apr 2001 20:41:08 +0400 (MSD) (envelope-from ache) Date: Mon, 16 Apr 2001 20:41:07 +0400 From: "Andrey A. Chernov" To: "Rodney W. Grimes" Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/www/mnoGoSearch-current Makefile Message-ID: <20010416204107.A3510@nagual.pp.ru> References: <20010416201707.B2726@nagual.pp.ru> <200104161628.JAA52878@gndrsh.dnsmgr.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200104161628.JAA52878@gndrsh.dnsmgr.net>; from freebsd@gndrsh.dnsmgr.net on Mon, Apr 16, 2001 at 09:28:10AM -0700 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Apr 16, 2001 at 09:28:10 -0700, Rodney W. Grimes wrote: > The can disagree all they want, the facts remain, nobody and nogroup > belong to the domain of the NFS sub-system, and anyone using them > for anything else is just creating borked code. I agree that two subsystems (NFS and httpd) use the same name space here, producing apparent conflict. In current particular case it cause no security implications because search database is public in anycase. > Search engines shouldn't need write access to anything... What about request cache, request statistics, PIDs, etc.? > It's time to break them... this is a security hole for anyone running NFS. I agree and already describe my position. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message