On 0, Josh Triplett <[email protected]> wrote: > Package: aptitude > Version: 0.4.11.10-1 > Severity: normal > > $ ls -l .aptitude/config > -rw-r--r-- 1 josh josh 406 2008-10-18 04:44 .aptitude/config > $ sha1sum .aptitude/config > 16c9a8f1b435b5101db9ac85771f18811959fd9f .aptitude/config > $ sudo aptitude > [immediately quit] > $ ls -l .aptitude/config > -rw-r--r-- 1 root root 406 2008-10-18 04:45 .aptitude/config > $ sha1sum .aptitude/config > 16c9a8f1b435b5101db9ac85771f18811959fd9f .aptitude/config >
Would it be possible to not put root rights when not needed? Here, $SUDO_USER can be used or even $SUDO_UID and $SUDO_GID. Is there any security reason to not do that? -- Mehdi Dogguy http://www.pps.jussieu.fr/~dogguy/ -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
