[39738] in bugtraq
Re: Installation of software, and security. . .
daemon@ATHENA.MIT.EDU (Matt Beaumont)
Tue Jul 19 17:35:55 2005
Date: Tue, 19 Jul 2005 09:46:36 -0700
From: Matt Beaumont <mbeaumon@cs.hmc.edu>
To: Tim Nelson <tim.nelson@webalive.biz>
Cc: John Richard Moser <nigelenki@comcast.net>,
Klaus Schwenk <zooloo_0@web.de>, bugtraq@securityfocus.com
Message-ID: <20050719164636.GA4426@cs.hmc.edu>
Mail-Followup-To: Tim Nelson <tim.nelson@webalive.biz>,
John Richard Moser <nigelenki@comcast.net>,
Klaus Schwenk <zooloo_0@web.de>, bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="VS++wcV0S1rZb1Fb"
Content-Disposition: inline
In-Reply-To: <Pine.LNX.4.60.0507191323450.3530@tnelson.webalive.biz>
--VS++wcV0S1rZb1Fb
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Jul 19, 2005 at 14:01:01 +1000, Tim Nelson wrote:
> My suggested solution would be to:
> 1. Build in to RPM (or whatever) any relatively harmless features
> which are regularly used (eg. reload)
That's a double-edged sword. On the one hand, a "standard library" of
useful installation actions could make life easier for developers and
package maintainers. On the other hand, the package management system
would then also have to play nice with the idiosyncracies of the service
management mechanisms on whatever systems are supported by the former.=20
> 2. Issue a security warning and quit for any packages that have
> pre/post install scripts, and any actions that might cause trouble
> (eg. reload)
> 3. Set --with-scripts (or something) to enable running scripts, and
> --with-actions to enable potentially troublesome actions (eg.
> reload), or --without-actions to just install files and not do the
> actions.
Good idea in principle, but a malicious package will just arrange to
tell J. Random User to run the install with whatever dangerous flags
allow the malware to do its thing, and, corollary to the "J. Random User
will always just click OK" principle of user psychology, the user will
follow the instructions and the box will get 0wned.
Anyway, that's just my two cents.=20
Cheers,
Matt
--VS++wcV0S1rZb1Fb
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
iD8DBQFC3S5r6jbu++NtcqMRAri/AKCLPH+T69v9cr0i1TLMP8VrUO5xAQCgm241
6n7z7/WpDZOEfmzPlJ8m1kU=
=SEoK
-----END PGP SIGNATURE-----
--VS++wcV0S1rZb1Fb--
