On Fri, 19 May 2006 01:53:29 +0200 "Kevin F. Quinn"
<[EMAIL PROTECTED]> wrote:
| obviously header.txt and skel.* aren't important.  scripts isn't too
| important either, although a manifest-style file in there wouldn't be
| difficult.  licenses and metadata don't have any security impact so
| there's little point there, also.

metadata has security impact.

| do profiles present a security risk?  Perhaps by masking/unmasking
| fixed/vulnerable versions of packages.

Or by using a bashrc, perhaps? Profiles most definitely do have
security impact.

-- 
Ciaran McCreesh
Mail            : ciaran dot mccreesh at blueyonder.co.uk


-- 
gentoo-dev@gentoo.org mailing list

Reply via email to