[Ffmpeg-devel] Re: [MPlayer-dev-eng] mphq2 - admins wanted

Rich Felker dalias
Mon Sep 5 20:49:39 CEST 2005


On Mon, Sep 05, 2005 at 07:54:41PM +0200, matthieu castet wrote:
> Rich Felker wrote:
> >On Mon, Sep 05, 2005 at 12:20:39PM +0200, Michael Niedermayer wrote:
> 
> >It was discussed on irc. The idea is to have the actual cvs repository
> >in a secondary virtualized machine, with no user accounts. User cvs
> >commands sent to the 'user host' would redirect via pserver or ssh to
> >this virtualized machine, with just one actual account restricted to
> >running the trusted cvs binary and nothing else (there would be no
> >other accessible binaries on that host and no writable+executable
> >filesystem).
> no executable filesystem is useless.
> You can execute anything you want with /lib/ld-linux.so.2 ...

No such file. Why the hell would such a file exist?? Secure
environments always use all-static-linking.

Rich





More information about the ffmpeg-devel mailing list