Re: [Devil-linux-develop] squid authorization modules

[Bruce S. <bw...@ar...>]

> >I'm sorry, but this is crazy.  These are small stand alone programs
> >which are part the squid package, and should be included.  All they do
> >is check a password crypt and send "OK" or "ERR" to stdout.
> >
> >There are tons of other non-optional programs that are just as much of a
> >security risk (none) as these are.  We could go crazy making every
> >binary optional.
>
> I'm trying to find a solution which makes everybody ( a kind of ) happy.

I understand, and it's a good idea in general.  I'm trying to explain
that this isn't necessary in this particular case.

> But there's probably a bug anyway: when you don't select the yp stuff, 
> the squid compile should actually fail since it's specified as a 
> required module.

No, that isn't a bug in this case.  It compiles fine without the YP
stuff, it just doesn't run.  I was surprised that it compiled too, but I
know this for a fact because the first CD I tried built fine, and it
took me awhile to figure out why yp_auth wouldn't run.  (before I added
ANY of the yp programs)

 - BS