I disagree there:

In my opinion ubuntu must make sure that its internal workings are as
secure as possible, especially when introducing them after a sysadmin
has set up and verified his system to be reasonably secure.

And these filesystems are ubuntu internals! Some of them were even
introduced to systems during an upgrade (/var/run and /var/lock during
the dapper cycle), so they were not even there during the initial system
audit.

You will rewrite /etc/fstab to add UUIDs in edgy anyway, I do not see
why that script could not add a couple of lines with permissions.

-- 
mountpoints with insecure permissions
https://launchpad.net/bugs/54530

--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to