Bug#287601: vdradmin: Vdradmin.pl script vulnerable to symlink attacks

Darren Salt pkg-vdr-dvb-devel@lists.alioth.debian.org
Thu, 30 Dec 2004 20:32:17 +0000


I demand that Javier Fern=E1ndez-Sanguino Pe=F1a may or may not have writ=
ten...

> On Wed, Dec 29, 2004 at 11:54:08PM +0000, Darren Salt wrote:
>> s/in theory// - I'm running vdr 1.3.17 as non-root.
>>> it only needs a small patch to make it possible that vdr can set the
>>> system-time. The only problem is that changing this would require a l=
ot
>>> of code in the maintainer scripts - patches for this would be very
>>> wellcome.
>> Have a look at the .diff.gz for my vdr package :-)

> And where can that patch be found? Could you please open up a wishlist =
bug
> against Debian's 'vdr' package attaching it?

Done (bug 287899).

--=20
| Darren Salt   | nr. Ashington, | linux (or ds) at
| woody, sarge, | Northumberland | youmustbejoking
| RISC OS       | Toon Army      | demon co uk
|   We've got Shearer, you haven't

Life is what happens when you're busy making other plans.