:For the general case (eg the code checked into the system), the check
:needs to remain enabled. Anything else is insecure.
:
:Warner
I have to agree... whenever one starts discussing weird, esoteric
workarounds one inevitably introduces security holes. I really think
just disabling the -s option may be the best solution.
Garance: I recommend you actually check to see how big your printer spools
get. If they look reasonable then turning off -s is not going to hurt
anything. I expect that most users don't even know the option exists and
so don't use it anyway.
-Matt
Matthew Dillon
<[EMAIL PROTECTED]>
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
