Re: selinux stole my bank details (and my pony)

Brian May wrote:

libgcrypt, used by GnuTLS, has some big problems too: http://lists.debian.org/debian-devel/2010/03/msg00298.html

Arthur de Jong's newer LDAP pam/nss library will avoid (2) indirectly by using a caching daemon, so that the LDAP bits are loaded into the setuid in the first place.