Sam <[EMAIL PROTECTED]> writes:

> However, this approach does require more code.  What you save by
> eliminating the few lines of code to read the IDs at startup is offset
> by the additional code you have to implement to install the IDs in the
> first place.

True.  But that code is, at least in theory, only ever run once for a
given installation, which makes it much harder for that code to be a
security hole even if it has bugs.

-- 
Russ Allbery ([EMAIL PROTECTED])         <URL:http://www.eyrie.org/~eagle/>

Reply via email to