Looking at http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2 , one thing that's done that's missing from your debdiff is to install staprun without world execute privileges and instead limit execution to users in the stapusr group, to minimize the risk from future vulnerabilities. Do you think you could add that?
Looking at http:// sources. redhat. com/git/ gitweb. cgi?p=systemtap .git;a= commit; h=b7565b41228be a196cefa3a7d43a b67f8f9152e2 , one thing that's done that's missing from your debdiff is to install staprun without world execute privileges and instead limit execution to users in the stapusr group, to minimize the risk from future vulnerabilities. Do you think you could add that?