Your message dated Wed, 16 Apr 2008 10:02:02 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#467299: fixed in checksecurity 2.0.9
has caused the Debian Bug report #467299,
regarding checksecurity: suid script searches fuse filesystems by default
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
467299: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=467299
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: checksecurity
Version: 2.0.7-11
Severity: normal
Since shfs, nfs etc mounts aren't searched by the suid checker by
default, I don't think fuse filesystems should be searched as well.
In my case, the fuse filesystem is an sshfs filesystem, which I
certainly dont want to be recursively searched!
I just added fuse to CS_TYPES, but haven't yet tested whether this is
going to work come next week's cronjob.
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.24 (SMP w/2 CPU cores)
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages checksecurity depends on:
ii cron 3.0pl1-103 management of regular background p
ii debconf [debconf-2.0] 1.5.19 Debian configuration management sy
ii perl 5.8.8-12 Larry Wall's Practical Extraction
Versions of packages checksecurity recommends:
pn logcheck <none> (no description available)
pn tiger <none> (no description available)
pn tripwire | integrit | aide | <none> (no description available)
-- debconf information:
checksecurity/oldconf:
--- End Message ---
--- Begin Message ---
Source: checksecurity
Source-Version: 2.0.9
We believe that the bug you reported is fixed in the latest version of
checksecurity, which is due to be installed in the Debian FTP archive:
checksecurity_2.0.9.dsc
to pool/main/c/checksecurity/checksecurity_2.0.9.dsc
checksecurity_2.0.9.tar.gz
to pool/main/c/checksecurity/checksecurity_2.0.9.tar.gz
checksecurity_2.0.9_all.deb
to pool/main/c/checksecurity/checksecurity_2.0.9_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Javier Fernandez-Sanguino Pen~a <[EMAIL PROTECTED]> (supplier of updated
checksecurity package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 16 Apr 2008 10:09:03 +0200
Source: checksecurity
Binary: checksecurity
Architecture: source all
Version: 2.0.9
Distribution: unstable
Urgency: low
Maintainer: Javier Fernandez-Sanguino Pen~a <[EMAIL PROTECTED]>
Changed-By: Javier Fernandez-Sanguino Pen~a <[EMAIL PROTECTED]>
Description:
checksecurity - basic system security checks
Closes: 375058 451054 467299
Changes:
checksecurity (2.0.9) unstable; urgency=low
.
* The "where did I leave my head release"
* Acknowledge the 2.0.7-10.1 NMU, the updated PO files from some languages
had not been included in the 2.0.7 release
* Do not search fuse filesystems by default (Closes: #467299)
* Lintian fix: remove debian/files from source (Closes: 451054)
* Allow users to select cron facility by depending on cron | anacron |
chrony (Closes: 375058)
Files:
563b786cf334e4fe25a13f4881637f63 532 admin optional checksecurity_2.0.9.dsc
61560cd95ea2dd3963b3ad48b6005ff7 27276 admin optional
checksecurity_2.0.9.tar.gz
5a42af281750526d312f8ab4910e5c01 24448 admin optional
checksecurity_2.0.9_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFIBbV8sandgtyBSwkRAmVoAJ9f3j8kNXMSFJsUI8vHZj9RZFnZZwCeLBzA
BHV5RtjADud7Oa3rOwzIiNA=
=U/Eh
-----END PGP SIGNATURE-----
--- End Message ---
