Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 6 Oct 2001 10:55:29 -0400
From:      James Halstead <James_Bond_79@yahoo.com>
To:        tlambert2@mindspring.com, Kris Kennaway <kris@obsecurity.org>
Cc:        Nate Williams <nate@yogotech.com>, Lyndon Nerenberg <lyndon@atg.aciworldwide.com>, Bernd Walter <ticso@mail.cicely.de>, current@freebsd.org
Subject:   Re: uucp user shell and home directory
Message-ID:  <200110061455.f96EtsH23886@mailout6.nyroc.rr.com>
In-Reply-To: <3BBEC328.BBA18D7C@mindspring.com>
References:  <ticso@mail.cicely.de> <20011005130234.B79332@xor.obsecurity.org> <3BBEC328.BBA18D7C@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Okay, I hope putting my $.02 in here does not get me into this war. I just 
have a comment/concern.

Taking uucp out of the system will leave a security hole around will it not?. 
Actually I think this will make it worse. Now the users (unless they install 
a fresh system) are left with the uucp binaries in their base system. Since 
there is nothing in /usr/src to update them with they will remain there, in 
whatever state, untill they realize this and take them out manually (even an 
UPDATING entry might not be noticed). Even after installing the port will 
these binaries not remain? I see it can copy the old configuration files over 
but does it remove the old binaries?

Please don't get me involved in this debate, I just had these concerns that I 
did not notice getting addressed. If they were and I did not see it then I 
apologize. 

James


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200110061455.f96EtsH23886>