I agree with Preston.  Discussion rapidly devolved from the beginning
into accusations thrown around.  Everybody is in a bad mood when they
report bugs and when they receive bugs.  Extra care must be taken by
everyone to avoid inflammation.  It would be helpful if the folks
involved apologized, backed up and tried again.

What I would suggest to move forward is to see if anyone would like to
volunteer to do the work on a rewrite.  The discussion has been focused
on patching and breaking the existing implementation and arguing if it
can be done better.   Nobody was ever asked for volunteers for a rewrite
and that sort of discussion scares volunteers away.

@kovid What you can do now, as project owner, is create a branch and let
people try and write a secure, cross platform capable mounter.  You
don't have to do much more than provide the branch and answer questions
about the implementation as needed.  Most of your job will be to stay
out of the way.  Let the volunteers work on their problem and see where
it goes.

@Jason & @Dan & others:  Would you be willing to work on a cross
platform mounter, either for calibre or as a 3rd party tool/library
calibre could use?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/885027

Title:
  SUID Mount Helper has 5 Major Vulnerabilities

To manage notifications about this bug go to:
https://bugs.launchpad.net/calibre/+bug/885027/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to