Package: mpd
Version: 0.11.5-6
Severity: wishlist
The mpd daemon currently binds to (and listens on) all active network
interfaces by default.
It would be good from a security viewpoint to either include the line
bind_to_address "127.0.0.1"
in the default mpd.conf or to ask the user what interface they want
mpd to listen on when it is being configured
("any" being an option to allow the current behavior if desired).
Binding to only the localhost (127.0.0.1) interface by default is the
approach taken by many other daemons in Debian (such as CUPS).
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16.9-amd64-k8-smp
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages mpd depends on:
ii adduser 3.87 Add and remove users and groups
ii debconf [debconf-2.0] 1.5.0 Debian configuration management sy
ii libao2 0.8.6-4 Cross Platform Audio Output Librar
ii libasound2 1.0.11-3 ALSA library
ii libaudiofile0 0.2.6-6 Open-source version of SGI's audio
ii libc6 2.3.6-7 GNU C Library: Shared libraries
ii libflac7 1.1.2-3.1 Free Lossless Audio Codec - runtim
ii libid3tag0 0.15.1b-8 ID3 tag reading library from the M
ii libmad0 0.15.1b-2.1 MPEG audio decoder library
ii libmikmod2 3.1.11-a-6 A portable sound library
ii libogg0 1.1.3-2 Ogg Bitstream Library
ii libvorbis0a 1.1.2-1 The Vorbis General Audio Compressi
ii libvorbisfile3 1.1.2-1 The Vorbis General Audio Compressi
ii zlib1g 1:1.2.3-11 compression library - runtime
mpd recommends no packages.
-- debconf information excluded
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
