From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JoJ4K-0001dy-GC for garchives@archives.gentoo.org; Tue, 22 Apr 2008 14:02:00 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D1049E0812; Tue, 22 Apr 2008 14:01:58 +0000 (UTC) Received: from helene.vsp.fi (helene.vsp.fi [83.146.216.15]) by pigeon.gentoo.org (Postfix) with ESMTP id 9CC9FE0812 for ; Tue, 22 Apr 2008 14:01:58 +0000 (UTC) Received: from localhost (dyn-196-59-dsl.vsp.fi [83.146.196.59]) by helene.vsp.fi (Postfix) with ESMTP id DB9DA78320 for ; Tue, 22 Apr 2008 17:02:50 +0300 (EEST) Date: Tue, 22 Apr 2008 15:56:53 +0300 From: Samuli Suominen To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] lastrite: sys-apps/systrace (security/treecleaners) Message-ID: <20080422155653.120f55e0@gentoo.org> In-Reply-To: <3c32af40804211334p7e5d916bsacda2a83bd6090a9@mail.gmail.com> References: <20080421220149.214a467b@gentoo.org> <3c32af40804211334p7e5d916bsacda2a83bd6090a9@mail.gmail.com> X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.9; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: bc271aa8-5fb0-43a6-90bf-b28052bcddac X-Archives-Hash: af69073bf14220b593b5baad4eef1e03 Mon, 21 Apr 2008 22:34:30 +0200 "Santiago M. Mola" kirjoitti: > On Mon, Apr 21, 2008 at 9:01 PM, Samuli Suominen > wrote: > > # Samuli Suominen (21 Apr 2008) > > # Masked for removal in 30 days. Doesn't build > > # wrt bug 178036 and has open CVE-2007-4773 wrt > > # security bug 203195. > > sys-apps/systrace > > -- > > gentoo-dev@lists.gentoo.org mailing list > > > > > > http://www.citi.umich.edu/u/provos/systrace/systrace-1.6e.tar.gz > > 1.6e solves the security problem. Just in case someone wants to fix > it. > It fails the same way the current ebuilds in tree. It was the first thing I've tried, obviosly. Besides, that's what lastrites are for, heads up. - drac -- gentoo-dev@lists.gentoo.org mailing list