[systemd-bugs] [Bug 67553] moving etc/udev/hwdb.bin to /lib/syslocal

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=67553

--- Comment #6 from Ralph_Ulrich <eulenreich at gmx.de> ---
Isn't this a potential security risk vector ?

Every admin "root" user in a fatal stress situation uses every tool available
to search for the cause of system break down. We already have a bin
/etc/ld.so.cache as someone pointed out. But these two binaries differ in a
fundamental way:
The contents of ld.so.cache is very dependend of local conditions.
On the contrary hwdb.bin only depend on foreign id strings.

This fact will provoke a sponsoring of Linux administration tools from
cyber-war intelligence. Use case: (Perhaps better to not use the term n.s.a)
The special chinese department will direct manufacturers to release their
hardware with fitting strings. In a way their previously sponsored
administration tools can get out of bounds ...

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20130731/52891ec4/attachment.html>