Is it a security breach?

[Martin Pitt]

Hi Oliver!

Oliver Grawert [2005-10-10 16:29 +0200]:
> from xscreensaver.postinst (i didnt change it from the debian version)
> 
> ---- snip ----
> # Reload all running xscreensaver processes
> if [ "$1" = "configure" ]; then
>         kill -s HUP `pidof xscreensaver` >/dev/null 2>&1 || true
> fi
> ---- snap ----

Killing user processes in postinsts is pretty evil; since after a
dist-upgrade you need to reboot the computer anyway, it also is not
necessary.

It would be worthwile to consider either completely removing this code
or maybe replace it with calling
/usr/share/update-notifier/notify-reboot-required (which is more than
necessary, but still better than killing).

Martin
-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20051010/6cd12225/attachment.pgp