Comment 3 for bug 677226

Revision history for this message
Steve Beattie (sbeattie) wrote :

Looking at http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2 , one thing that's done that's missing from your debdiff is to install staprun without world execute privileges and instead limit execution to users in the stapusr group, to minimize the risk from future vulnerabilities. Do you think you could add that?