From owner-freebsd-current  Sat Oct  6  7:57:49 2001
Delivered-To: freebsd-current@freebsd.org
Received: from mailout6.nyroc.rr.com (mailout6-0.nyroc.rr.com [24.92.226.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3224337B416
	for <current@freebsd.org>; Sat,  6 Oct 2001 07:57:44 -0700 (PDT)
Received: from there (roc-24-161-84-25.rochester.rr.com [24.161.84.25])
	by mailout6.nyroc.rr.com (8.11.6/Road Runner 1.12) with SMTP id f96EtsH23886;
	Sat, 6 Oct 2001 10:55:54 -0400 (EDT)
Message-Id: <200110061455.f96EtsH23886@mailout6.nyroc.rr.com>
Content-Type: text/plain;
  charset="iso-8859-1"
From: James Halstead <James_Bond_79@yahoo.com>
To: tlambert2@mindspring.com, Kris Kennaway <kris@obsecurity.org>
Subject: Re: uucp user shell and home directory
Date: Sat, 6 Oct 2001 10:55:29 -0400
X-Mailer: KMail [version 1.3]
Cc: Nate Williams <nate@yogotech.com>,
	Lyndon Nerenberg <lyndon@atg.aciworldwide.com>,
	Bernd Walter <ticso@mail.cicely.de>, current@freebsd.org
References: <ticso@mail.cicely.de> <20011005130234.B79332@xor.obsecurity.org> <3BBEC328.BBA18D7C@mindspring.com>
In-Reply-To: <3BBEC328.BBA18D7C@mindspring.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

Okay, I hope putting my $.02 in here does not get me into this war. I just 
have a comment/concern.

Taking uucp out of the system will leave a security hole around will it not?. 
Actually I think this will make it worse. Now the users (unless they install 
a fresh system) are left with the uucp binaries in their base system. Since 
there is nothing in /usr/src to update them with they will remain there, in 
whatever state, untill they realize this and take them out manually (even an 
UPDATING entry might not be noticed). Even after installing the port will 
these binaries not remain? I see it can copy the old configuration files over 
but does it remove the old binaries?

Please don't get me involved in this debate, I just had these concerns that I 
did not notice getting addressed. If they were and I did not see it then I 
apologize. 

James


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message