From owner-freebsd-bugs Sun Oct 11 07:40:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA00668 for freebsd-bugs-outgoing; Sun, 11 Oct 1998 07:40:08 -0700 (PDT) (envelope-from owner-freebsd-bugs@FreeBSD.ORG) Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA00641 for ; Sun, 11 Oct 1998 07:40:02 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.8.8/8.8.5) id HAA29952; Sun, 11 Oct 1998 07:40:00 -0700 (PDT) Date: Sun, 11 Oct 1998 07:40:00 -0700 (PDT) Message-Id: <199810111440.HAA29952@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.ORG From: dag-erli@ifi.uio.no (Dag-Erling C. =?iso-8859-1?Q?Sm=F8rgrav?= ) Subject: Re: misc/8260: upgrade security breach Reply-To: dag-erli@ifi.uio.no (Dag-Erling C. =?iso-8859-1?Q?Sm=F8rgrav?= ) Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The following reply was made to PR misc/8260; it has been noted by GNATS. From: dag-erli@ifi.uio.no (Dag-Erling C. =?iso-8859-1?Q?Sm=F8rgrav?= ) To: bs@eunet.ch Cc: freebsd-gnats-submit@FreeBSD.ORG Subject: Re: misc/8260: upgrade security breach Date: 11 Oct 1998 16:30:03 +0200 bs@eunet.ch writes: > Put a *** SECURITY WARNING *** with appropriate kind words that it > may be a good idea to disable inetd and friends between the > upgrade-commit button and the actual upgrade. > This is a non-issue for installs running single user mode. I, uh, don't know what to say, except maybe that if you think sysinstall's upgrade option was ever meant to work in multi-user mode, you are completely off your rocker. No offense. DES -- Dag-Erling Smørgrav - dag-erli@ifi.uio.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message