Date: Fri, 17 Jan 2003 13:56:06 -0800 From: Gregory Sutter <gsutter@zer0.org> To: Alfred Perlstein <bright@mu.org> Cc: Nate Lawson <nate@root.org>, Martin Blapp <mb@imp.ch>, cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/mountd mountd.c src/usr.sbin/rpc.lockd lockd.c src/usr.sbin/rpc.statd statd.c src/usr.sbin/rpc.yppasswdd yppasswdd_main.c src/usr.sbin/rpcbind rpcb_svc_com Message-ID: <20030117215606.GA29071@klapaucius.zer0.org> In-Reply-To: <20030116185115.GQ33821@elvis.mu.org> References: <20030116185752.L98919@levais.imp.ch> <Pine.BSF.4.21.0301161015050.46845-100000@root.org> <20030116185115.GQ33821@elvis.mu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--DocE+STaALJfprDB Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2003-01-16 10:51 -0800, Alfred Perlstein <bright@mu.org> wrote: > In the light of the security issues here and request for silence > about the issue, perhaps we can post a followup to -developers after > such a commit and at a later date follow up with a forced commit > when things are "safe" to completely explain the issue. That is excellent advice on a subject that has come up before and surely will again. Perhaps it should be codified in the Committers' Guide? The only change I'll suggest is that the followup be sent to cvs-committers and cvs-all instead of developers; more than just those with CVS privileges follow the commit logs, and I'm sure all will be interested in reading the commit logs and followup messages so they can better judge their systems' vulnerability. Greg --=20 Gregory S. Sutter "Happiness isn't good enough mailto:gsutter@zer0.org for me! I demand euphoria!" http://www.zer0.org/~gsutter/ --Calvin (Bill Watterson) hkp://wwwkeys.pgp.net/0x845DFEDD --DocE+STaALJfprDB Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- iD8DBQE+KHv2IBUx1YRd/t0RAnOTAJ0fohP499I2p36mVtPDtVLQxY+jVACeMfNx EyWC9ThZNYvUxkB+xlXkwtY= =iiZM -----END PGP SIGNATURE----- --DocE+STaALJfprDB-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030117215606.GA29071>