Date: Tue, 21 Aug 2001 13:33:51 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Alexander Langer <alex@big.endian.de> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/sysutils/xcdroast Makefile pkg-plist ports/sysutils/xcdroast/files patch-Makefile Message-ID: <20010821133351.A19823@xor.obsecurity.org> In-Reply-To: <20010821221705.A860@zerogravity.kawo2.rwth-aachen.d>; from alex@big.endian.de on Tue, Aug 21, 2001 at 10:17:05PM %2B0200 References: <200108211950.f7LJo2B13278@freefall.freebsd.org> <20010821221705.A860@zerogravity.kawo2.rwth-aachen.d>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Tue, Aug 21, 2001 at 10:17:05PM +0200, Alexander Langer wrote: > Thus spake Alexander Langer (alex@FreeBSD.org): > > > sysutils/xcdroast Makefile pkg-plist > > sysutils/xcdroast/files patch-Makefile > > Log: > > More fixes: > > ... all submitted by MAINTAINER. > > > - chown root:cdwrite various utilities used by xcdroast, such as > > cdrecord, and set them chmod 4710. I don't know if I like this. > > Opinions (Security Officer?)? > > What about this? I missed this commit..you should forward mail to security-officer if you want us to look at it. I think this change looks wrong and potentially dangerous: you'd need to convince me it's the right thing to do and safe to leave in. Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7gsWuWry0BWjoQKURAljOAKDOTrD+uLxnPfBY/ce0K5g/W8r82QCg0Bwo UpP9zwTMtDdIRyQHhAMJiL4= =lxN0 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010821133351.A19823>