From owner-cvs-all@FreeBSD.ORG Thu Jan 13 15:24:33 2005 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8C0C316A4CE; Thu, 13 Jan 2005 15:24:33 +0000 (GMT) Received: from shrike.submonkey.net (cpc2-cdif3-6-0-cust204.cdif.cable.ntl.com [81.103.67.204]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2568443D2D; Thu, 13 Jan 2005 15:24:33 +0000 (GMT) (envelope-from setantae@submonkey.net) Received: from setantae by shrike.submonkey.net with local (Exim 4.43 (FreeBSD)) id 1Cp6pq-0001eT-GV; Thu, 13 Jan 2005 15:24:30 +0000 Date: Thu, 13 Jan 2005 15:24:30 +0000 From: Ceri Davies To: Gleb Smirnoff Message-ID: <20050113152430.GF49329@submonkey.net> Mail-Followup-To: Ceri Davies , Gleb Smirnoff , src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org References: <200501131507.j0DF7ZAr081525@repoman.freebsd.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="jql2kCLuNjorMGq1" Content-Disposition: inline In-Reply-To: <200501131507.j0DF7ZAr081525@repoman.freebsd.org> X-PGP: finger ceri@FreeBSD.org User-Agent: Mutt/1.5.6i Sender: Ceri Davies cc: cvs-src@FreeBSD.org cc: src-committers@FreeBSD.org cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc/periodic/security 100.chksetuid X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jan 2005 15:24:33 -0000 --jql2kCLuNjorMGq1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jan 13, 2005 at 03:07:35PM +0000, Gleb Smirnoff wrote: > glebius 2005-01-13 15:07:35 UTC >=20 > FreeBSD src repository >=20 > Modified files: > etc/periodic/security 100.chksetuid=20 > Log: > Don't do setuid checks on file systems mounted with noexec option. Umm, why not? If setuid binaries appear anywhere on my system then I'd like to continue to be told so that I can be confident of where they came from. I don't care if they pose an immediate threat or not. Ceri --=20 Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. -- Einstein (attrib.) --jql2kCLuNjorMGq1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFB5pKuocfcwTS3JF8RAiRfAJ0eIWJnBo8G2KSK6OgRLx2r1Fr+IwCeOVLJ u90j0XKymdT74HN3iExiYWQ= =cbjr -----END PGP SIGNATURE----- --jql2kCLuNjorMGq1--