From: Jason S. <ja...@sh...> - 2006-12-09 00:29:29
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > there's a migration guide on this page: > > http://wigwam-framework.org/documentation.html hm. not quite what I was looking for. I'll look at the other docs and see if they help. also, I notice the dates on those - two-and-a-half years ago! crazy.... has any work been done on wigwam-4 since then? >> I seem to remember fess or paulie asking me about how to make a safe setuid >> chroot wrapper. did that ever happen? > > no we didn't get anywhere with that. That was an attempt to further > reduce dependancies on the base system, another wigwam deficiency is > that the boundry between wigwam and the base system is blurry to say the > least. yes, this is, for my money, the biggest flaw in wigwam. it's all well and good to say that wigwam frees you from local system dependencies, but it's way too easy to start relying on system libraries and not even realizing it - this has bitten me several times. chrooting is the only way to be sure. plus, it buys you paranoia points. -Jason -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) Comment: See https://private.idealab.com/public/jason/jason.gpg iD8DBQFFegNnswXMWWtptckRAvEbAKC9OzQyB5U+98u4y/1nT20D87vOYgCgwyPL l58uF2FVUn8kKMkDjjklbN0= =lfjC -----END PGP SIGNATURE----- |