From: | Michael Orlitzky <mjo@g.o> | ||
---|---|---|---|
To: | gentoo-dev@l.g.o | ||
Subject: | Re: [gentoo-dev] Vanilla sources | ||
Date: | Fri, 03 Jan 2020 14:41:37 | ||
Message-Id: | 9b48db99-19dc-617b-c0d4-ffa0216b43be@gentoo.org | ||
In Reply to: | Re: [gentoo-dev] Vanilla sources by "Toralf Förster" |
1 | On 1/3/20 9:40 AM, Toralf Förster wrote: |
2 | > On 1/3/20 3:37 PM, Michael Orlitzky wrote: |
3 | >> The gentoo-sources aren't 100% safe either, but the exploitable scenario |
4 | >> is less common thanks to fs.protected_{hardlinks,symlinks}=1. |
5 | > |
6 | > But this can be easily achieved w/o installing gentoo-sources, or? |
7 | > |
8 | |
9 | Yes, if you know how to do it. And the hard part: if you know that you |
10 | *should* do it. |
Subject | Author |
---|---|
Re: [gentoo-dev] Vanilla sources | Rich Freeman <rich0@g.o> |