On Thu, May 12, 2005 at 06:05:33PM +0200, Martin Pitt wrote: > Package: dhcp3-client > Severity: wishlist > Tags: security patch > > Hi! > > dhclient currently runs as root, which is much more than necessary. > Similarly to the derooting of dhcpd (I filed a separate bug about > this) I minimized the privileges of dhclient. Here is the patch (which > requires that the server derooting patch is already applied): > > http://patches.ubuntu.com/patches/dhcp3.deroot-client.diff > > Please consider applying it in Debian. Please also don't hesitate to > contact me if you have questions or suggestions how to improve it. >
Similiar to #308832, I'll look into applying this after Sarge, when I hopefully have some more time. regards Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
