Dear Martin-Eric,

> ... We already call -dSAFER and drop privileges early, so we're
> already protected as it is. Closing.

Sorry, you seem to misunderstand: this bug is (more-or-less) about the
need to use the -P- also, as well as -dSAFER, to be protected.

Is cups-pdf "part of" cups? In that case you may be "safe" because of
chdir("/"), see http://bugs.debian.org/584002 .

Thanks, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to