sm-sorcery-bugs AT lists.ibiblio.org
Subject: Bugs for Sorcery are reported here
List archive
[SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode
- From: bugzilla-daemon AT bugs.sourcemage.org
- To: sm-sorcery-bugs AT lists.ibiblio.org
- Subject: [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode
- Date: 9 Oct 2006 16:06:47 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=13172
------- Additional Comments From acedit AT armory.com 2006-10-09 11:06 -------
(In reply to comment #2)
> Admins should be smart enough
> to check this on their own but some users may not know what a security risk
> suid
> binaries and 777 directories mean.
I don't think we should be in the business of writing rudimentary security
auditors for our "regular" users. Theres plenty of other tools that do a
better
job of that. Sorcery is a package manager, it does package management. The
checks in cleanse are to check for broken packages, broken meaning not usable
by
other packages. It is still not clear to me how permission/ownership checking
is
relevant. The lib checker should already catch all relevant examples of
permission problems.
--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
-
[SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode,
bugzilla-daemon, 10/09/2006
- <Possible follow-up(s)>
- [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode, bugzilla-daemon, 10/09/2006
- [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode, bugzilla-daemon, 10/09/2006
- [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode, bugzilla-daemon, 10/09/2006
- [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode, bugzilla-daemon, 10/09/2006
Archive powered by MHonArc 2.6.24.