[Bug 1062] mmv pmda sensitive to malevolent data

[bugzilla-daemon@xxxxxxxxxxx]

     Nathan Scott
 changed
              bug 1062

What	Removed	Added
Status	NEW	RESOLVED
Resolution	---	FIXED

Comment # 3 on bug 1062 from Nathan Scott

This is fixed upstream.  The installation section of the pmdammv(1) man page
has also been updated to describe the alternative mmv stats dir security
schemes.

Targetted fuzzing of mmv input data is left as an interesting future QA
extension.  At this stage noone has cycles to spend on it however (AFAIK? -
would love to see some work done on that) - it is less of an issue with use of
the group-based mmv stats dir access of course.

---

      You are receiving this mail because:

• You are on the CC list for the bug.