Bug#287601: vdradmin: Vdradmin.pl script vulnerable to symlink attacks
Darren Salt
pkg-vdr-dvb-devel@lists.alioth.debian.org
Thu, 30 Dec 2004 20:32:17 +0000
I demand that Javier Fern=E1ndez-Sanguino Pe=F1a may or may not have writ=
ten...
> On Wed, Dec 29, 2004 at 11:54:08PM +0000, Darren Salt wrote:
>> s/in theory// - I'm running vdr 1.3.17 as non-root.
>>> it only needs a small patch to make it possible that vdr can set the
>>> system-time. The only problem is that changing this would require a l=
ot
>>> of code in the maintainer scripts - patches for this would be very
>>> wellcome.
>> Have a look at the .diff.gz for my vdr package :-)
> And where can that patch be found? Could you please open up a wishlist =
bug
> against Debian's 'vdr' package attaching it?
Done (bug 287899).
--=20
| Darren Salt | nr. Ashington, | linux (or ds) at
| woody, sarge, | Northumberland | youmustbejoking
| RISC OS | Toon Army | demon co uk
| We've got Shearer, you haven't
Life is what happens when you're busy making other plans.