oss-sec mailing list archives

Re: [PATCH] implement privmode support in dash


From: Tim Brown <tmb () 65535 com>
Date: Fri, 23 Aug 2013 12:29:41 +0100

If we're going to fix dash to drop privs by default, might it also be worth 
reevaluating bash-as-sh where upon it *doesn't* drop privileges?  I can see 
the argument as to why, but Tavis' arguments also hold true for this case.

Tim
-- 
Tim Brown
<mailto:tmb () 65535 com>

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: