Package: e2fsprogs
Version: 1.40.2-1
Severity: normal

Currently (unless my system deviates from everyone else) tune2fs is
world-executable:
$ ls -l /sbin/tune2fs
-rwxr-xr-x 3 root root 21432 2007-07-14 23:06 /sbin/tune2fs

I wanted to query whether this is in fact the way we want it.  It
doesn't bother me personally since I only have my own personal debian
machines.

But I could imagine it being somewhat disconcerting if I were managing a
set of common machines, only to find some random user had, for
instance, changed the times for the next automatic filesystem checks by
invoking tune2fs -c.

I guess the same might apply to the other e2fsprogs utilities in /sbin,
which are all world-executable.

Is the current state really how it should be?

Drew


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22 (PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages e2fsprogs depends on:
ii  e2fslibs                      1.40.2-1   ext2 filesystem libraries
ii  libblkid1                     1.40.2-1   block device id library
ii  libc6                         2.6.1-1    GNU C Library: Shared libraries
ii  libcomerr2                    1.40.2-1   common error description library
ii  libss2                        1.40.2-1   command-line interface parsing lib
ii  libuuid1                      1.40.2-1   universally unique id library

e2fsprogs recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to