From owner-cvs-all  Tue Aug 21 13:34: 2 2001
Delivered-To: cvs-all@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-7.dsl.lsan03.pacbell.net [63.207.60.7])
	by hub.freebsd.org (Postfix) with ESMTP
	id A09D337B408; Tue, 21 Aug 2001 13:33:54 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 12DCA66D1C; Tue, 21 Aug 2001 13:33:52 -0700 (PDT)
Date: Tue, 21 Aug 2001 13:33:51 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Alexander Langer <alex@big.endian.de>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: ports/sysutils/xcdroast Makefile pkg-plist ports/sysutils/xcdroast/files patch-Makefile
Message-ID: <20010821133351.A19823@xor.obsecurity.org>
References: <200108211950.f7LJo2B13278@freefall.freebsd.org> <20010821221705.A860@zerogravity.kawo2.rwth-aachen.d>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="LZvS9be/3tNcYl/X"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010821221705.A860@zerogravity.kawo2.rwth-aachen.d>; from alex@big.endian.de on Tue, Aug 21, 2001 at 10:17:05PM +0200
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG


--LZvS9be/3tNcYl/X
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Aug 21, 2001 at 10:17:05PM +0200, Alexander Langer wrote:
> Thus spake Alexander Langer (alex@FreeBSD.org):
>=20
> >     sysutils/xcdroast    Makefile pkg-plist=20
> >     sysutils/xcdroast/files patch-Makefile=20
> >   Log:
> >   More fixes:
>=20
> ... all submitted by MAINTAINER.
>=20
> >   - chown root:cdwrite various utilities used by xcdroast, such as
> >     cdrecord, and set them chmod 4710.  I don't know if I like this.
> >     Opinions (Security Officer?)?
>=20
> What about this?

I missed this commit..you should forward mail to security-officer if
you want us to look at it.  I think this change looks wrong and
potentially dangerous: you'd need to convince me it's the right thing
to do and safe to leave in.

Kris

--LZvS9be/3tNcYl/X
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7gsWuWry0BWjoQKURAljOAKDOTrD+uLxnPfBY/ce0K5g/W8r82QCg0Bwo
UpP9zwTMtDdIRyQHhAMJiL4=
=lxN0
-----END PGP SIGNATURE-----

--LZvS9be/3tNcYl/X--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message