Subject: Re: final testing: taylor-uucp package (fwd)
To: John Nemeth <jnemeth@victoria.tc.ca>
From: Rick Kelly <rmk@toad.rmkhome.com>
List: current-users
Date: 10/28/2001 15:21:47
John Nemeth said:

>On Mar 20, 10:32am, Simon Burge wrote:
>} 
>} One reason for the recent push to pkgsrc'ise UUCP is that it had a
>} security hole, which was theoretically exploitable on a stock system
>} because we called one of the UUCP programs from the daily script...

>     Which reminds me, we still haven't seen a patch for it for released
>versions of NetBSD, or a NetBSD security advisory on it.

And it seems to me that it would be more productive to fix the bug than
to remove functionality from the base OS.

-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com