Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1419758.eH1rNfhxKm@sarpedon>
Date: Fri, 23 Aug 2013 12:29:41 +0100
From: Tim Brown <tmb@...35.com>
To: oss-security@...ts.openwall.com
Subject: Re: [PATCH] implement privmode support in dash

If we're going to fix dash to drop privs by default, might it also be worth 
reevaluating bash-as-sh where upon it *doesn't* drop privileges?  I can see 
the argument as to why, but Tavis' arguments also hold true for this case.

Tim
-- 
Tim Brown
<mailto:tmb@...35.com>
Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.