Re: disabling virecover by default

2017-11-09 Thread Robert Elz
Date:Fri, 10 Nov 2017 00:12:46 + From:co...@sdf.org Message-ID: <20171110001246.ga6...@sdf.org> | i could use it to delete any file in /, The current version? | and the hang is at boot. As I said, it should probably be run in background, so rc doesn't wait o

Re: disabling virecover by default

2017-11-09 Thread coypu
i could use it to delete any file in /, and the hang is at boot.

Re: disabling virecover by default

2017-11-09 Thread Robert Elz
Date:Thu, 9 Nov 2017 21:19:09 + From:co...@sdf.org Message-ID: <20171109211908.ga8...@sdf.org> | The way virecover currently works is problematic for security (see the | recent nvi commits). Aside from a few (potential mostly) bug fixes, the one issue that Chr

disabling virecover by default

2017-11-09 Thread coypu
Hi, The way virecover currently works is problematic for security (see the recent nvi commits). I do believe it's possible to achieve the same with much lower risk by rewriting it, but as I don't plan on making these changes, I'd like to propose an alternative: disabling virecover by default. Th