Date: Mon, 16 Apr 2001 20:41:07 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/www/mnoGoSearch-current Makefile Message-ID: <20010416204107.A3510@nagual.pp.ru> In-Reply-To: <200104161628.JAA52878@gndrsh.dnsmgr.net>; from freebsd@gndrsh.dnsmgr.net on Mon, Apr 16, 2001 at 09:28:10AM -0700 References: <20010416201707.B2726@nagual.pp.ru> <200104161628.JAA52878@gndrsh.dnsmgr.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Apr 16, 2001 at 09:28:10 -0700, Rodney W. Grimes wrote: > The can disagree all they want, the facts remain, nobody and nogroup > belong to the domain of the NFS sub-system, and anyone using them > for anything else is just creating borked code. I agree that two subsystems (NFS and httpd) use the same name space here, producing apparent conflict. In current particular case it cause no security implications because search database is public in anycase. > Search engines shouldn't need write access to anything... What about request cache, request statistics, PIDs, etc.? > It's time to break them... this is a security hole for anyone running NFS. I agree and already describe my position. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010416204107.A3510>