[distcc] some questions

Amir Tal tal at whatsup.org.il
Sun Sep 29 21:30:01 GMT 2002


On Monday 30 September 2002 00:02, Aaron Lehmann wrote:
> On Sun, Sep 29, 2002 at 10:15:01PM +0200, joerg.beyer at email.de wrote:
> > for xecurity reasons, you should not have a compiler installed
> > on a firewall. A compiler is a powerfull tool for an attacker - so he
> > should not find one on a firewall.
>
> I'm sorry but this is false. A compiler is NOT a dangerous tool. It is
> entirely unprivileged. An attacker can easily compile code on a
> similar system and upload it to the target system, install a compiler
> on the target system, or build a cross compiler on his/her own system
> if necessary.

i agree.
now, does anyone have any answers for my questions ? ;)
tal.





More information about the distcc mailing list