Bug#1113774: Disabling -fcf-protection in sudo for bookworm

--0000000000005cde610645380843
Content-Type: text/plain; charset="UTF-8"

On Fri, Dec 5, 2025, 17:06 Christoph Berg <[email protected]> wrote:

> Re: James Addison
> > Even so: does this mean that we should be careful about disabling
> > fcf-protection=branch on a broader/default basis?
>
> The question was entirely only about bookworm. In bookworm, none of
> the fcf-protection bits are enabled by default. It was solely active
> in sudo because upstream enabled it.
>
> I believe the question of disabling fcf-protection is not relevant for
> any other bookworm package. The "unstable" part of that question
> should be discussed on -devel, not in this bug.
>
> Christoph
>

Acknowledged - thanks, Christoph.

>

--0000000000005cde610645380843
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div><div class=3D"gmail_quote gmail_quote_container"><di=
v dir=3D"ltr" class=3D"gmail_attr">On Fri, Dec 5, 2025, 17:06 Christoph Ber=
g &lt;<a href=3D"mailto:[email protected]">[email protected]</a>&gt; wrote:<br>=
</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;b=
order-left:1px solid rgb(204,204,204);padding-left:1ex">Re: James Addison<b=
r>
&gt; Even so: does this mean that we should be careful about disabling<br>
&gt; fcf-protection=3Dbranch on a broader/default basis?<br>
<br>
The question was entirely only about bookworm. In bookworm, none of<br>
the fcf-protection bits are enabled by default. It was solely active<br>
in sudo because upstream enabled it.<br>
<br>
I believe the question of disabling fcf-protection is not relevant for<br>
any other bookworm package. The &quot;unstable&quot; part of that question<=
br>
should be discussed on -devel, not in this bug.<br>
<br>
Christoph<br></blockquote></div></div><div dir=3D"auto"><br></div><div dir=
=3D"auto">Acknowledged - thanks, Christoph.</div><div dir=3D"auto"><div cla=
ss=3D"gmail_quote gmail_quote_container"><blockquote class=3D"gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pa=
dding-left:1ex">
</blockquote></div></div></div>

--0000000000005cde610645380843--