Thomas de Grenier de Latour found a codeing mistake in checkrestart,
that allowed a shell user to trick checkrestart into running code.

This bug exist in debian-goodies at least as far back as 0.23 and I
inherited it into my modified version of checkrestart that I announced here.

I've implemented Thomas'es fix in my version.

http://www.arcdraco.net/~dragon/checkrestart


I had hoped my code would be merged into debian-goodies by now, but
since that doesn't seem to be happening, everyone interested in news
about the tool, can use this RSS to keep up to date:
http://www.arcdraco.net/crss/node/2

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to