Package: shadow
Version: 1:4.4-4
Severity: wishlist
Hi,
I notice that we aren't currently running shadow's testsuite as
part of the package build. This seems a little risky given it's
such a security-sensitive (!) package.
I did notice the following warning in tests/README:
This testsuite is NOT SECURE: it will temporarily change your
passwords file with known passwords.
You should run it on a chroot, or on a secured dedicated system.
... so it's fair enough that we are not running it as part of the
Debian package build. However, this seems like a perfect use-case
for ci.debian.net / autopkgtest.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
