Thomas de Grenier de Latour found a codeing mistake in checkrestart, that allowed a shell user to trick checkrestart into running code.
This bug exist in debian-goodies at least as far back as 0.23 and I inherited it into my modified version of checkrestart that I announced here. I've implemented Thomas'es fix in my version. http://www.arcdraco.net/~dragon/checkrestart I had hoped my code would be merged into debian-goodies by now, but since that doesn't seem to be happening, everyone interested in news about the tool, can use this RSS to keep up to date: http://www.arcdraco.net/crss/node/2
smime.p7s
Description: S/MIME Cryptographic Signature