Bug#248122: Debian Bug #248122: msttcorefonts: Please run wget as user nobody instead of as root

2005-12-12 Thread Tollef Fog Heen
* Justin Pryzby | Have you given any thought to this bug? It seems like it would be | easy and desirable to avoid running wget as root. Indeed, *two* of | the outstanding RC bugs in the months leading up to the etch release | were security problems with wget. If so, I don't think I would want

Bug#248122: Debian Bug #248122: msttcorefonts: Please run wget as user nobody instead of as root

2005-12-12 Thread Justin Pryzby
On Mon, Dec 12, 2005 at 02:54:44PM +0100, Tollef Fog Heen wrote: * Justin Pryzby | Have you given any thought to this bug? It seems like it would be | easy and desirable to avoid running wget as root. Indeed, *two* of | the outstanding RC bugs in the months leading up to the etch release

Bug#248122: Debian Bug #248122: msttcorefonts: Please run wget as user nobody instead of as root

2005-12-12 Thread Tollef Fog Heen
* Justin Pryzby | I don't suppose md5sums are available? Does the file change | sufficiently often such that its not reasonable to hardcode an MD5? It doesn't change, and I have the hashes, so that might be a workable approach. | Ah, maybe this bug is moot anyway. I seem to recall a thread

Bug#248122: Debian Bug #248122: msttcorefonts: Please run wget as user nobody instead of as root

2005-12-12 Thread Justin Pryzby
On Mon, Dec 12, 2005 at 04:03:34PM +0100, Tollef Fog Heen wrote: * Justin Pryzby | I don't suppose md5sums are available? Does the file change | sufficiently often such that its not reasonable to hardcode an MD5? It doesn't change, and I have the hashes, so that might be a workable

Bug#248122: Debian Bug #248122: msttcorefonts: Please run wget as user nobody instead of as root

2005-12-10 Thread Justin Pryzby
Have you given any thought to this bug? It seems like it would be easy and desirable to avoid running wget as root. Indeed, *two* of the outstanding RC bugs in the months leading up to the etch release were security problems with wget. -- Clear skies, Justin -- To UNSUBSCRIBE, email to