Mozilla plugins packaging [Re: SELinuxDenyPtrace: Write, compile, run, but don't debug applications?]

drago01 drago01 at gmail.com
Tue Apr 10 09:40:14 UTC 2012


On Mon, Apr 9, 2012 at 4:06 PM, Jan Kratochvil
<jan.kratochvil at redhat.com> wrote:
> On Sun, 08 Apr 2012 19:02:31 +0200, Mark Wielaard wrote:
>> I like the idea to disallow this for say firefox plugins or httpd cgi
>> scripts,
>
> Wouldn't it be better to package Mozilla plugins in Fedora so that they are
> trusted?

rpm packages do not magically fix security issues. A vulnerability in
a plugin can be exploited by an attacker regardless how the plugin got
installed. (rpm or not).


More information about the devel mailing list