Re: ASDF-INSTALL and gpg

   I think you would have a stronger case if there was, instead of only one
   gpg executable, a gpg-verify and gpg-import (and a large number of
   others, as well), and we could have asdf-install only able to do the
   former.  But Unix/Linux w/o something like SELinux really doesn't have a
   good mechanism for this.  You really want ACLs, and you really want to
   have different executables having different permissions.  Multiple user
   personalities is both too cumbersome for this, and also not fine-grained
   enough.

Lets see, if your thinking was correct, before SELinux was invented
the *nix world was 'wide-open.  Alas *nix privledge control is ancient
and has always worked well.  In case you haven't noticed, your nix
system already has 'different executables having different
permissions'.  You have no idea what you are talking about.


   I agree with you in theory, but in practice, I think there's no security
   advantage to be gained by refusing to put in a key-fetch gpg invocation,
   and a huge cost in terms of usability.  I think Gary should go ahead and
   put it in.

The lazy argument, the results of which are seen daily on Bugtraq.
Also only a fair attempt at social engineering, Kevin would be
so disappointed.


   Note also that if you are a careful person, as you are, then there's no
   cost to YOU to having the key-fetch continuation be there, either.  It
   simply won't work for you, since the ASDF-INSTALL process won't be
   running as a user with permissions to do a key-fetch, so you will STILL
   have to invoke the gpg key fetch on YOUR machine with the right
   permissions.  So you won't lose anything by having this happen.

Wrong.  The most common exploit is a proxy.  That proxy is used
against the Internet in non-helpful ways, the recent Skype downtime
has been cited as an example.  Skype claims that somehow Microsofts
recent patch caused it (at the same time saying it's not Microsofts or
Skypes fault), but fails to explain why prior Microsoft patches did
not disrupt their network nor why did it happen in conjunction with a
new DOS (to run via proxies) release.  Very poor spin control, maybe
Skype could use your help?


   On that basis, I would argue that adding a key-fetching continuation has
   effectively no cost (including cost to system security), and has a
   substantial benefit to the asdf-install user.

What basis?  You announce that you are a harried, and too busy
"professional" that can't be bothered to do anything hard, with zero
security background.  Now suddenly you have noticed that a 'download'
feature is not present in asdf-install.  What did you do before this
issue was raised?  Did you even use asdf-install?  Never noticed the
separate fetch before??  All of a sudden you are losing hours over a
fetch and it never came to your notice??


I find so much in your post that is garbage that I doubt you are a
serious user of asdf-install.  However, with an election year coming
up, there should be plenty of demand for your demonstrated talent.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/