Les Mikesell wrote at about 14:07:23 -0600 on Wednesday, February 10, 2021:
 > On Wed, Feb 10, 2021 at 1:58 PM <backu...@kosowsky.org> wrote:
 > >
 > > 4. Further, along that line, while sudoer has been well-tested,
 > 
 > About that....
 >   https://www.helpnetsecurity.com/2021/01/27/cve-2021-3156/
 > 

Thanks for supporting my contention that 'sudo' is actively and
continually tested, patched and improved.
The fact that the community continues to actively search for
vulnerabilities and then patch them gives me infinitely more
confidence in sudo than in untested or undertested approaches.

Has anybody done a security review of rrsync?? (along with how it
interacts with perl, perl libraries, ssh and the authorized_keys file,
etc.)

Again thanks Les for the helpful real-life proof-point!


_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    https://github.com/backuppc/backuppc/wiki
Project: https://backuppc.github.io/backuppc/

Reply via email to