Re: (no subject)

I'm not sure I understand the point. Why is it secure for ASDF-Install to 
invoke gpg to verify a sig, but insecure invoke gpg to fetch and import a 
key? Is there privilege separation in gpg? I don't think so (but I could be 
wrong), and if not, it just seems like an inconvenience to make the user 
invoke gpg from the command-line, instead of letting him or her ask 
ASDF-Install to do it on his or her behalf. 
Can't a corrupted ASDF-Install image do whatever it wants with my keyring 
(or just about anything else), anyway, absent some privilege-limiting 
framework like SELinux?
___
Sent with SnapperMail
www.snappermail.com

...... Original Message .......
On Sun, 2 Sep 2007 11:24:27 -0400 "Gary King" <[email protected]> wrote:
>> A strong security mind would point out that would allow any evil
>> process installed by a corrupted asdf-install package...
>
>This is _exactly_ the not-quite-formed thought that was bothering me.
>
>> Basically you want independence in the key-fetch and
>> key-usage processes.
>
>and this is exactly the articulation of the general principle. (As  
>I'm sure folks on the list have guessed,) I don't have much of a  
>security background but do appreciate the need for it. Being able to  
>sum up ideas like this independence so succinctly is very helpful.  
>(Maybe we could make T-shirts <smile>).
>
>> Average Joe user wouldn't care of course, and I doubt that you do
>> either.  Perhaps with a *warning*.  Since I'm tired of all the spam
>> and clone armies, I think the current independent setup is fine.
>
>I see your point. ... and now I even understand it better!
>
>thanks,
>--
>Gary Warren King, metabang.com
>Cell: (413) 559 8738
>Fax: (206) 338-4052
>gwkkwg on Skype * garethsan on AIM
>
>
>
>
>
>-------------------------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc.
>Still grepping through log files to find problems?  Stop.
>Now Search log events and configuration files using AJAX and a browser.
>Download your FREE copy of Splunk now >>  http://get.splunk.com/
>_______________________________________________
>cclan-list mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/cclan-list
>


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/