From owner-cvs-ports@FreeBSD.ORG  Thu Nov 16 21:16:07 2006
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
X-Original-To: cvs-ports@FreeBSD.org
Delivered-To: cvs-ports@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7F6A216A407;
	Thu, 16 Nov 2006 21:16:07 +0000 (UTC)
	(envelope-from kris@obsecurity.org)
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2461643D68;
	Thu, 16 Nov 2006 21:16:03 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196])
	by elvis.mu.org (Postfix) with ESMTP id 052F91A3C19;
	Thu, 16 Nov 2006 13:16:03 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 15888515B8; Thu, 16 Nov 2006 16:15:51 -0500 (EST)
Date: Thu, 16 Nov 2006 16:15:50 -0500
From: Kris Kennaway <kris@obsecurity.org>
To: Jean-Yves Lefort <jylefort@FreeBSD.org>
Message-ID: <20061116211550.GA68969@xor.obsecurity.org>
References: <200611161949.kAGJnDr5074353@repoman.freebsd.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="5vNYLRcllDrimb99"
Content-Disposition: inline
In-Reply-To: <200611161949.kAGJnDr5074353@repoman.freebsd.org>
User-Agent: Mutt/1.4.2.2i
Cc: security-team@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org,
	ports-committers@FreeBSD.org
Subject: Re: cvs commit: ports/sysutils/hal Makefile
	ports/sysutils/hal/files patch-hal.conf.in
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Nov 2006 21:16:07 -0000


--5vNYLRcllDrimb99
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 16, 2006 at 07:49:13PM +0000, Jean-Yves Lefort wrote:
> jylefort    2006-11-16 19:49:13 UTC
>=20
>   FreeBSD ports repository
>=20
>   Modified files:
>     sysutils/hal         Makefile=20
>   Added files:
>     sysutils/hal/files   patch-hal.conf.in=20
>   Log:
>   Give wheel group members the same rights as operator group members.

This violates the definition of the wheel group, FYI (even though it
might seem expedient), so it can be viewed as a weakening of the
security model.  Prior to this commit, the only right that the wheel
group had was the ability to attempt to su to root, if the user knows
the password.

Kris

--5vNYLRcllDrimb99
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)

iD8DBQFFXNUGWry0BWjoQKURAkazAKCkTfdlLRxHicBzZm9CPU7Cuf6t3wCeITrg
mw6UifpmHRIvF5ZsrBDOEOU=
=FryS
-----END PGP SIGNATURE-----

--5vNYLRcllDrimb99--