Re: [Fsfe-uk] Linux for Kids Briefing

[Dominic Hargreaves]

On Fri, Oct 01, 2004 at 10:34:55AM +0100, Philip Hands wrote:

> A few moments with google confirmed that RH invented this hack, that it 
> started giving rise to security holes almost as soon as it was released 
> (surprise) and that Debian will not be including it on the grounds that 
> it's too horrible (which made me feel much better :-)
> 
> I seem to notice something like this on abut a monthly basis which 
> confirms my belief that, even if Debian isn't as warm and cuddly as the 
> rest, it will continue to be better because of the commitment to doing 
> things in a technicaly correct manner (in this case, putting the 
> relevant users in groups cdrom, floppy etc.)

Uhm, how is this going to be better? At best it will be no worse than a
poorly configured pam_console hack, since at least you /might/, with
said hack, restrict access to the bona fide "owner" of the data on
removable drives. If you just put everyone is a group that can read the
device all the time you have lost completely.

Dominic.