Brian Cameron ??:
> 
> Henry:
> 
> I'm just trying to get a clearer picture about how this works, and
> the security ramifications.
> 
>>> What, if anything, can a system administrator do to prevent such attacks
>>> from being possible.  Can the system administrator turn off the feature
>>> which allows users plugins to be functional?  Is this feature off or on
>>> by default?
>> By default, gkrellmd server will load and run all plugins, but we can 
>> change some codes to make it not load all plugins under 
>> ~/.gkrellm2/plugins-gkrellmd/, only load the plugins installed by 
>> sysadmins..
> 
> I'm not sure that this is necessary.  Might be good to update the one
> pager with the security-related information that has been discussed.
> Then ARC can better make any decision about any additional work
> which may be needed.
OK, finish updating the one-pager...
> 
> Brian

Reply via email to