Subject: Re: final testing: taylor-uucp package (fwd)
To: John Nemeth <jnemeth@victoria.tc.ca>
From: Rick Kelly <rmk@toad.rmkhome.com>
List: current-users
Date: 10/28/2001 15:21:47
John Nemeth said:
>On Mar 20, 10:32am, Simon Burge wrote:
>}
>} One reason for the recent push to pkgsrc'ise UUCP is that it had a
>} security hole, which was theoretically exploitable on a stock system
>} because we called one of the UUCP programs from the daily script...
> Which reminds me, we still haven't seen a patch for it for released
>versions of NetBSD, or a NetBSD security advisory on it.
And it seems to me that it would be more productive to fix the bug than
to remove functionality from the base OS.
--
Rick Kelly rmk@rmkhome.com www.rmkhome.com