Re: Possibly unsecure specfile code...

[Joe C. <jo...@sw...>]

Jamie Cameron wrote:

> The only reason it doesn't compare ownership against root is that the 
> same code is used in
> setup.sh to setup the temp directory, and it is possible that someone 
> might want to install
> webmin as a non-root user. Since RPMs are always installed as root, $< 
> will always be 0.

Just to be pedantic...Technically a non-root user can use RPM, assuming 
he has his own rpmdb, and uses relocatable packages.  But the Webmin RPM 
would never work in such a case, so no worries.  ;-)
-- 
Joe Cooper <jo...@sw...>
Web caching appliances and support.
http://www.swelltech.com