From owner-cvs-all  Wed Jul 26 11: 1:46 2000
Delivered-To: cvs-all@freebsd.org
Received: from burka.rdy.com (burka.rdy.com [205.149.189.91])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6EE1B37B790; Wed, 26 Jul 2000 11:01:34 -0700 (PDT)
	(envelope-from dima@laptop.rdy.com)
Received: from laptop.rdy.com (mg-20425426-40.ricochet.net [204.254.26.40])
	by burka.rdy.com (8.9.3/8.9.3) with ESMTP id LAA38215;
	Wed, 26 Jul 2000 11:01:28 -0700 (PDT)
	(envelope-from dima@laptop.rdy.com)
Received: (from dima@localhost)
	by laptop.rdy.com (8.9.3/8.9.3) id LAA02808;
	Wed, 26 Jul 2000 11:01:22 -0700 (PDT)
	(envelope-from dima)
Message-Id: <200007261801.LAA02808@laptop.rdy.com>
Subject: Re: cvs commit: src/etc Makefile src/include Makefile src/release Makefile
 src/release/picobsd/build Makefile.mfs src/release/picobsd/custom Makefile.mfs
 src/release/picobsd/dial Makefile.mfs src/release/picobsd/install Makefile.mfs
In-Reply-To: <200007261738.LAA30792@harmony.village.org> "from Warner Losh at
 Jul 26, 2000 11:38:06 am"
To: Warner Losh <imp@village.org>
Date: Wed, 26 Jul 2000 11:01:19 -0700 (PDT)
Cc: "Andrey A. Chernov" <ache@nagual.pp.ru>,
	cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
X-Class: Fast
Organization: HackerDome
Reply-To: dima@rdy.com
From: dima@rdy.com (Dima Ruban)
X-Mailer: ELM [version 2.4ME+ PL77 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Warner Losh writes:
> [[ CCs trimmed ]]
> 
> The one area that Andrey and I don't agree on at the moment is if it
> should be on by default or off by default.  I guess the first person
> to find time to implement it will get to choose :-).
> 
> Maybe this issue needs to be addressed in a more creative way.  If we
> were to update /etc/security to warn of these insecure directories,
> then we could easily have -L off and the system admin would know, via
> the handbook docs that we could write, to run mtree -L once to fix the
> problems.  Since the directories stay fixed once fixed, absenst enemy
> action, this might be a good solution.  Also, we might put something
> in the buildworld process that checks at the end so that people would
> know if they had a problem right away.

I like this solution.

> 
> Warner
> 
> 
> 

-- dima


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message