Gentoo Archives: gentoo-dev

From: Michael Orlitzky <mjo@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Vanilla sources
Date: Fri, 03 Jan 2020 14:41:37
Message-Id: 9b48db99-19dc-617b-c0d4-ffa0216b43be@gentoo.org
In Reply to: Re: [gentoo-dev] Vanilla sources by "Toralf Förster"
1 On 1/3/20 9:40 AM, Toralf Förster wrote:
2 > On 1/3/20 3:37 PM, Michael Orlitzky wrote:
3 >> The gentoo-sources aren't 100% safe either, but the exploitable scenario
4 >> is less common thanks to fs.protected_{hardlinks,symlinks}=1.
5 >
6 > But this can be easily achieved w/o installing gentoo-sources, or?
7 >
8
9 Yes, if you know how to do it. And the hard part: if you know that you
10 *should* do it.

Replies

Subject Author
Re: [gentoo-dev] Vanilla sources Rich Freeman <rich0@g.o>