edubuntu-bugs team mailing list archive
-
edubuntu-bugs team
-
Mailing list archive
-
Message #02822
[Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities
I agree with Preston. Discussion rapidly devolved from the beginning
into accusations thrown around. Everybody is in a bad mood when they
report bugs and when they receive bugs. Extra care must be taken by
everyone to avoid inflammation. It would be helpful if the folks
involved apologized, backed up and tried again.
What I would suggest to move forward is to see if anyone would like to
volunteer to do the work on a rewrite. The discussion has been focused
on patching and breaking the existing implementation and arguing if it
can be done better. Nobody was ever asked for volunteers for a rewrite
and that sort of discussion scares volunteers away.
@kovid What you can do now, as project owner, is create a branch and let
people try and write a secure, cross platform capable mounter. You
don't have to do much more than provide the branch and answer questions
about the implementation as needed. Most of your job will be to stay
out of the way. Let the volunteers work on their problem and see where
it goes.
@Jason & @Dan & others: Would you be willing to work on a cross
platform mounter, either for calibre or as a 3rd party tool/library
calibre could use?
--
You received this bug notification because you are a member of Edubuntu
Bugsquad, which is subscribed to calibre in Ubuntu.
https://bugs.launchpad.net/bugs/885027
Title:
SUID Mount Helper has 5 Major Vulnerabilities
To manage notifications about this bug go to:
https://bugs.launchpad.net/calibre/+bug/885027/+subscriptions