Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-16 Thread Thijs Kinkhorst
On Sunday 14 November 2010 23:35:39 Robert Millan wrote: > 2010/11/14 Werner Koch : > >> I don't have time to work on this myself. Unless someone else does, > >> I'd still recommend adding the SUID bit as a temporary solution. > > > > Might be the easiest way until we have proper disk encryption s

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-14 Thread Robert Millan
2010/11/14 Werner Koch : >> I don't have time to work on this myself. Unless someone else does, >> I'd still recommend adding the SUID bit as a temporary solution. > > Might be the easiest way until we have proper disk encryption support. Ok. Thijs, since there were no other objections, would you

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-14 Thread Werner Koch
On Sat, 13 Nov 2010 21:38, r...@debian.org said: Yeah, that is a problem. Last weekend I tried to port it but I have a lack of understanding how the Debian packages are supposed to work together; in particular the kernel headers and the various system libraries like libgeom etc. > For that we

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-13 Thread Robert Millan
2010/11/13 Werner Koch : > I can't see why encrypting the swap puts an additional burden on the > user or on the machine. This depends on whether it's the default setting or not. If it's not, it definitely does (just the burden of figuring out what the heck is wrong is already significant for man

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-13 Thread Werner Koch
On Sat, 13 Nov 2010 14:58, r...@debian.org said: > I disagree. This puts an additional burden on the user. Adding SUID I can't see why encrypting the swap puts an additional burden on the user or on the machine. If you need to swap/page something you are in either of these situations: - The

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-13 Thread Thijs Kinkhorst
On Saturday 13 November 2010 14:58:29 Robert Millan wrote: > >>> Upstream recommends [2] setting the SUID bit and assures that "the > >>> program > >>> drops root privileges as soon as locked memory is allocated". > >> > >> However it is much easier and more secure to enable encrypted swap > >> sp

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-13 Thread Robert Millan
2010/11/13 Thijs Kinkhorst : >>> Upstream recommends [2] setting the SUID bit and assures that "the >>> program >>> drops root privileges as soon as locked memory is allocated". >> >> However it is much easier and more secure to enable encrypted swap >> space than to use mlock.  It seems that gbde

Bug#598471: [Pkg-gnupg-maint] Bug#598471: using insecure memory on GNU/kFreeBSD

2010-11-13 Thread Thijs Kinkhorst
On Wed, September 29, 2010 14:36, Werner Koch wrote: > On Wed, 29 Sep 2010 11:41, r...@debian.org said: > >> Upstream recommends [2] setting the SUID bit and assures that "the >> program >> drops root privileges as soon as locked memory is allocated". > > However it is much easier and more secure t