Skip to Content.
Sympa Menu

sm-sorcery-bugs - [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode

sm-sorcery-bugs AT lists.ibiblio.org

Subject: Bugs for Sorcery are reported here

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-sorcery-bugs AT lists.ibiblio.org
  • Subject: [SM-Sorcery-Bugs] [Bug 13172] cleanse --fix should check ownership and mode
  • Date: 9 Oct 2006 16:06:47 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=13172





------- Additional Comments From acedit AT armory.com 2006-10-09 11:06 -------
(In reply to comment #2)
> Admins should be smart enough
> to check this on their own but some users may not know what a security risk
> suid
> binaries and 777 directories mean.

I don't think we should be in the business of writing rudimentary security
auditors for our "regular" users. Theres plenty of other tools that do a
better
job of that. Sorcery is a package manager, it does package management. The
checks in cleanse are to check for broken packages, broken meaning not usable
by
other packages. It is still not clear to me how permission/ownership checking
is
relevant. The lib checker should already catch all relevant examples of
permission problems.



--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




Archive powered by MHonArc 2.6.24.

Top of Page