Ownership of kernel headers
tush at yahoo.com
Sun Oct 13 11:46:15 PDT 2002
Matthias Benkmann wrote:
>Oops. I should have noticed myself. You got a point here. This is not only
>an issue with the kernel but some other packages as well. However,
>changing ownership after untarring is not a good solution because there is
>enough time for an attacker to replace files before ownership is changed.
>As a security measure, we could chmod go-x /lfs.
And also advice users that compiling packages as non-root and installing
as root is a good practice to follow.
LFS ID: 1377
Unsubscribe: send email to listar at linuxfromscratch.org
and put 'unsubscribe lfs-dev' in the subject header of the message
More information about the lfs-dev