Re: [Devil-linux-develop] squid authorization modules

[Heiko Z. <he...@zu...>]

Bruce Smith wrote:

>>>I'm sorry, but this is crazy.  These are small stand alone programs
>>>which are part the squid package, and should be included.  All they do
>>>is check a password crypt and send "OK" or "ERR" to stdout.
>>>
>>>There are tons of other non-optional programs that are just as much of a
>>>security risk (none) as these are.  We could go crazy making every
>>>binary optional.
>>>      
>>>
>>I'm trying to find a solution which makes everybody ( a kind of ) happy.
>>    
>>
>
>I understand, and it's a good idea in general.  I'm trying to explain
>that this isn't necessary in this particular case.
>  
>
I personally don't care....

>>But there's probably a bug anyway: when you don't select the yp stuff, 
>>the squid compile should actually fail since it's specified as a 
>>required module.
>>    
>>
>
>No, that isn't a bug in this case.  It compiles fine without the YP
>stuff, it just doesn't run.  I was surprised that it compiled too, but I
>know this for a fact because the first CD I tried built fine, and it
>took me awhile to figure out why yp_auth wouldn't run.  (before I added
>ANY of the yp programs)
>  
>
Oh ok, then never mind.

Heiko