From mboxrd@z Thu Jan 1 00:00:00 1970 From: martin f krafft Date: Fri, 17 Dec 2004 17:10:10 +0000 Subject: Re: Bug#286040: please allow permissions.d to follow symlinks Message-Id: <20041217171010.GA3494@cirrus.madduck.net> MIME-Version: 1 Content-Type: multipart/mixed; boundary="3V7upXqbjpZ4EhLz" List-Id: References: <20041217083115.GA4050@wonderland.linux.it> In-Reply-To: <20041217083115.GA4050@wonderland.linux.it> To: linux-hotplug@vger.kernel.org --3V7upXqbjpZ4EhLz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable also sprach Greg KH [2004.12.17.1745 +0100]: > I think Kay properly stated my argument already. I'll leave it at > that for now, as he has done a wonderful job so far. mh. I must work on improving my English comprehension skills then. > Actually I was considering just dropping the permissions.d file > entirely, as I think we don't need it anymore. But I have not had > the time to determine if this is possible or not just yet. Oh great. Reverse evolution. > What about the fun interaction with pam that causes device nodes to > "magically" assume other permissions. Are you objecting to that too? Yes, vehemently. It has caused way too much trouble. =46rom the README: "Please note: the current version depends on too many external tools and libraries, making it big and hard to evaluate for security." http://www.i-eye.net/exploits/pam_console.c.php It may work for your one-user desktop system. Any other use is dangerous. There must be a reason why it's not part of libpam. > I have yet to see a patch that offers such an "improvement" in > this thread. If you ever create one, I would love to see it > posted on the list for everyone to evaluate. Until then, this > argument is over. I might provide it. However, so far the feedback has been that I should instead bugger off and get a clue. So instead I think I will feed it into Debian and see if it's useful. You can always come and ask for it should I forget to submit it here. --=20 martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck =20 invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver! spamtraps: madduck.bogus@madduck.net =20 "in the stage of grand illusion you walked into my life out of my dreams." -- david bowie --3V7upXqbjpZ4EhLz Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFBwxLyIgvIgzMMSnURAsjFAKDr9RNl4JQIUvO3d1LYlNgHzAaVfQCgzOjV Y5GFvBATyj3ymjoKOGEFY1M= =2Uzl -----END PGP SIGNATURE----- --3V7upXqbjpZ4EhLz-- ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net Linux-hotplug-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel