Control: reassign -1 debconf
Control: forcemerge -1 223683

On 01/03/2015 01:56 PM, John Paul Adrian Glaubitz wrote:
> I rather tend to mark this as "wontfix" as it is pretty much inevitable
> to run scripts when installing or removing packages. sane-utils is
> certainly not the only package affected.

Add to that that mounting /tmp "noexec" doesn't really gain you any
extra security as any attacker could just run a malicious binary
in /tmp by invoking the Linux loader with "/lib64/ld-linux-x86-64.so.2
/tmp/bla" or with the help of the interpretor in the case of scripts.

Also, this would be rather a bug in debconf than in sane-utils,
re-assigning and merging therefore as this bug has already
been reported multiple times.

Adrian

-- 
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaub...@debian.org
`. `'   Freie Universitaet Berlin - glaub...@physik.fu-berlin.de
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to