Commits on Source 2

  • Daniel Kahn Gillmor's avatar
    reduce risky use of chown · 39d3d539
    Daniel Kahn Gillmor authored
    In general, chown is risky business.  On most systems it can only be
    done as root.  Even riskier is chowning a file in a directory that is
    already owned by a non-privileged user, because (depending on kernel,
    system configuration, filesystem boundaries, etc) it's possible that
    the non-privileged user could control the file pointed to, and the
    superuser accidentally chowns a file they didn't intend.
    
    Attacks here are often racy (TOCTOU) and subtly depend on interactions
    with other system parts (e.g. gaining r/w control over a specific file
    in /var/lib/dpkg/ or /var/lib/).  Better to avoid these risks entirely
    where possible.
    39d3d539
  • Daniel Kahn Gillmor's avatar
    drop keytrans (openpgp2{spki,pem,ssh}, pem2openpgp) · cebc96d0
    Daniel Kahn Gillmor authored
    These conversion utilities only support RSA, and they're not widely
    used outside the monkeysphere project.
    
    As of now, the monkeysphere development branch doesn't even need them,
    so we can drop them entirely.
    cebc96d0
Loading
Loading