Date: Sun, 4 Jun 2006 07:48:44 +1000 From: Peter Jeremy <peterjeremy@optushome.com.au> To: Kris Kennaway <kris@obsecurity.org> Cc: PauAmma <pauamma@gundo.com>, freebsd-ports@freebsd.org Subject: Re: PR ports/76915 fell through the cracks? Message-ID: <20060603214843.GA713@turion.vk2pj.dyndns.org> In-Reply-To: <20060603205927.GA4758@xor.obsecurity.org> References: <Pine.LNX.4.64.0605310018540.23594@javelin.gundo.com> <20060602204523.GA6184@roadrunner.buck.local> <20060603193141.GA3544@xor.obsecurity.org> <Pine.LNX.4.64.0606031520070.16169@javelin.gundo.com> <20060603205927.GA4758@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--3V7upXqbjpZ4EhLz
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sat, 2006-Jun-03 16:59:28 -0400, Kris Kennaway wrote:
>On Sat, Jun 03, 2006 at 03:49:42PM -0500, PauAmma wrote:
>> On Sat, 3 Jun 2006, Kris Kennaway wrote:
>> >And potentially many other similar changes. The full scope of the
>> >changes required to fully support a noexec /var is clearly enormous,
>> >which is one reason why I don't want to add partial support for this
>> >nonstandard and rarely-used configuration.
=2E..
>Personally I don't think it is worth attempting to handle, as I
>mentioned previously.
Whilst I don't recall seeing anyone raise a problem with noexec /var
before, having a noexec /tmp (which is not that uncommon) regularly
causes grief. I agree that it's probably impractical to work around
the problem. Adding checks to installworld and pkg_delete so that
they bomb out with a clear error message ("/foo is mounted noexec.
You can't installworld/pkg_delete without an executable /foo") would
probably be a net win.
--=20
Peter Jeremy
--3V7upXqbjpZ4EhLz
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (FreeBSD)
iD8DBQFEggO7/opHv/APuIcRAv/OAJwPWd99Qa5wn+nAjm9gw3Fo7VIlCwCgjT0X
Kdg+bolHWAn4z5e8NXcy+I0=
=Ckp7
-----END PGP SIGNATURE-----
--3V7upXqbjpZ4EhLz--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060603214843.GA713>