Date: Wed, 30 Nov 2005 04:02:48 -0500 From: Kris Kennaway <kris@obsecurity.org> To: ?d?m Szilveszter <adamsz@mailpont.hu> Cc: freebsd-security@freebsd.org Subject: Re: Reflections on Trusting Trust Message-ID: <20051130090247.GA68049@xor.obsecurity.org> In-Reply-To: <4155.193.68.33.1.1133340924.squirrel@193.68.33.1> References: <20051129120151.5A2FB16A420@hub.freebsd.org> <002601c5f4fa$b5115320$e403000a@rickderringer> <20051129232703.GA60060@xor.obsecurity.org> <438CE78F.303@freebsd.org> <4155.193.68.33.1.1133340924.squirrel@193.68.33.1>
next in thread | previous in thread | raw e-mail | index | archive | help
--huq684BweRXVnRxX Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 30, 2005 at 09:55:24AM +0100, ?d?m Szilveszter wrote: > On Sze, November 30, 2005 12:43 am, Colin Percival mondta: > > Even before you get to that point, you have to worry about making sure > > that the build clients are secure. One possibility which worries me a > > great deal is that a trojan in the build code for a low-profile port > > (e.g., misc/my-port-which-nobody-else-uses) could allow an attacker to > > gain control of a build client (and then insert trojans into packages > > which are built there). >=20 > Which practically begs the question: could we, pretty please, change the > defaults and stop encouraging people from downloading distfiles and > compiling them when using the ports tree as *root*? (shudder) There is > exactly zero reason for this that I can think of apart from some "well > it's more convenient that way" arguments. And of course that some ports don't build as non-root :-) If you're willing to fix them (there may be a lot), I could schedule a full port build done as non-root so you can start work. Kris --huq684BweRXVnRxX Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFDjWq3Wry0BWjoQKURArmKAJ4isEMkIoaUSw6WYzcbuvqMLHnk9gCfVUpQ 5btEz+JfJJjKTSmhbTqnStU= =QoQw -----END PGP SIGNATURE----- --huq684BweRXVnRxX--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051130090247.GA68049>