Package: wader-core
Version: 0.5.10-1
Severity: normal

Dear Maintainer,

The script /usb/bin/wader-ctl, used to start the wader-core service,
uses /tmp/wader.err - a non-secure temporary file name.

Please send your log elsewhere, or redirect to /dev/null if no need
for the output.

The respective part of the script:

elif options.should_start:
    if os.path.exists('/tmp/wader.err'):
        sh("rm -f /tmp/wader.err")

    tap_path = os.path.join(DATA_DIR, 'core-tap.py')
    sh("/usr/bin/twistd --nodaemon --python=%s "
       "--pidfile=%s --reactor=glib2 2>/tmp/wader.err" % (tap_path, PID_PATH))

Also applies to the version in Sid (0.5.12-1).

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=he_IL.UTF-8, LC_CTYPE=he_IL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages wader-core depends on:
ii  python               2.7.3~rc2-1
ii  python-dbus          1.1.1-1
ii  python-gudev         147.2-3
ii  python-messaging     0.5.11+debian-1
ii  python-serial        2.5-2.1
ii  python-twisted-core  12.0.0-1
ii  python-tz            2012c-1
ii  python-wader         0.5.12-1

Versions of packages wader-core recommends:
ii  mobile-broadband-provider-info  20120708-1
ii  network-manager                 0.9.4.0-10
ii  python-m2crypto                 0.21.1-2
ii  python-twisted-conch            1:12.0.0-1
ii  usb-modeswitch                  1.2.3+repack0-1
ii  wvdial                          1.61-4.1

wader-core suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to