From owner-freebsd-security Thu Mar 16 9:58:54 2000 Delivered-To: freebsd-security@freebsd.org Received: from zippy.cdrom.com (zippy.cdrom.com [204.216.27.228]) by hub.freebsd.org (Postfix) with ESMTP id 56A8537BC44 for ; Thu, 16 Mar 2000 09:58:51 -0800 (PST) (envelope-from jkh@zippy.cdrom.com) Received: from zippy.cdrom.com (jkh@localhost [127.0.0.1]) by zippy.cdrom.com (8.9.3/8.9.3) with ESMTP id JAA04198; Thu, 16 Mar 2000 09:59:14 -0800 (PST) (envelope-from jkh@zippy.cdrom.com) To: Garance A Drosihn Cc: Sheldon Hearn , kjm@rins.ryukoku.ac.jp (KOJIMA Hajime), freebsd-security@FreeBSD.ORG Subject: Re: FreeBSD Security Advisory: FreeBSD-SA-00:08.lynx In-reply-to: Your message of "Thu, 16 Mar 2000 12:34:14 EST." Date: Thu, 16 Mar 2000 09:59:14 -0800 Message-ID: <4195.953229554@zippy.cdrom.com> From: "Jordan K. Hubbard" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The installation does not fail if lynx is missing. > At 11:45 AM +0200 3/16/00, Sheldon Hearn wrote: > >On Thu, 16 Mar 2000 17:30:19 +0900, KOJIMA Hajime wrote: > > > > > But, /stand/sysinstall still use lynx as default text browser. > > > If you want to read HTML documents in sysinstall, /stand/sysinstall > > > will go to install lynx package automatically (and it will fail in > > > 4.0-RELEASE). > > > >I don't think this is a problem, since any host from which it is likely > >to read documentation is quite unlikely to be malicious. > > I would think it's a problem if sysinstall expects to use lynx, > it thus goes to install lynx, and that installation *FAILS*. If > I'm reading that right, you're then left with sysinstall trying > to use a package that does not exist. > > (true?) > > > --- > Garance Alistair Drosehn = gad@eclipse.acs.rpi.edu > Senior Systems Programmer or drosih@rpi.edu > Rensselaer Polytechnic Institute > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message