:For the general case (eg the code checked into the system), the check
:needs to remain enabled. Anything else is insecure.
:
:Warner
I have to agree... whenever one starts discussing weird, esoteric
workarounds one inevitably introduces security holes. I really think
just disabling the -s option may be the best solution.
Garance: I recommend you actually check to see how big your printer spools
get. If they look reasonable then turning off -s is not going to hurt
anything. I expect that most users don't even know the option exists and
so don't use it anyway.
-Matt
Matthew Dillon
<dil...@backplane.com>
To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message
