From owner-freebsd-audit@FreeBSD.ORG  Fri Jul 16 08:20:48 2004
Return-Path: <owner-freebsd-audit@FreeBSD.ORG>
Delivered-To: freebsd-audit@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0CE4A16A4CE; Fri, 16 Jul 2004 08:20:48 +0000 (GMT)
Received: from frodo.otenet.gr (frodo.otenet.gr [195.170.0.12])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 40BE343D41; Fri, 16 Jul 2004 08:20:47 +0000 (GMT)
	(envelope-from keramida@freebsd.org)
Received: from orion.daedalusnetworks.priv (aris.bedc.ondsl.gr
	[62.103.39.226])
	by frodo.otenet.gr (8.12.10/8.12.10) with SMTP id i6G8Ka3E007536;
	Fri, 16 Jul 2004 11:20:40 +0300
Received: from orion.daedalusnetworks.priv (orion [127.0.0.1])
	i6G8MxKD006741;	Fri, 16 Jul 2004 11:22:59 +0300 (EEST)
	(envelope-from keramida@freebsd.org)
Received: (from keramida@localhost)i6G8MxEO006740;
	Fri, 16 Jul 2004 11:22:59 +0300 (EEST)
	(envelope-from keramida@freebsd.org)
Date: Fri, 16 Jul 2004 11:22:59 +0300
From: Giorgos Keramidas <keramida@freebsd.org>
To: Scott Long <scottl@samsco.org>
Message-ID: <20040716082259.GC6353@orion.daedalusnetworks.priv>
References: <DF07AEAE-CCE8-11D8-9FE1-00039312D914@fillmore-labs.com>
	<40E8275B.1090008@kientzle.com> <40F75D68.80400@samsco.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <40F75D68.80400@samsco.org>
cc: Tim Kientzle <tim@kientzle.com>
cc: re@freebsd.org
cc: audit@freebsd.org
Subject: Re: RFC: bsdtar in 5.3
X-BeenThere: freebsd-audit@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: FreeBSD Security Audit <freebsd-audit.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-audit>,
	<mailto:freebsd-audit-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-audit>
List-Post: <mailto:freebsd-audit@freebsd.org>
List-Help: <mailto:freebsd-audit-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-audit>,
	<mailto:freebsd-audit-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Jul 2004 08:20:48 -0000

On 2004-07-15 22:45, Scott Long <scottl@samsco.org> wrote:
>Tim Kientzle wrote:
>>Oliver Eikemeier wrote:
>>>Are there any plans to do an security audit of bsdtar? This may be
>>>an important issue, since tar is often used running as root to
>>>unpack downloaded archives.
>>
>>This is an excellent idea.  Obviously, someone other than me should
>>lead this: any volunteers?
>
> Where are we on this?

I thought of replying positively to Tim's initial post but not as a
"leader" figure of any sort.  If I could help by researching about test
scenarios, designing some and/or running them I'd be glad to assist in
any way I can though.

Giorgos