Package: mpd
Version: 0.14-1
Severity: wishlist

In mpd.conf, the "admin" permission covers updating the db and killing mpd.

Since there are quite some usecases in which the user can upload music to the
mpd's directory by means of anonymous FTP or so, it is desirable that any user
may issue a db update, while killing the mpd should not be possible.

I'd suggest to remove the db update from the admin group and either add it to
"control" or an own group.

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mpd depends on:
ii  adduser                   3.110          add and remove users and groups
ii  libao2                    0.8.8-4        Cross Platform Audio Output Librar
ii  libasound2                1.0.16-2       ALSA library
ii  libaudiofile0             0.2.6-7        Open-source version of SGI's audio
ii  libavahi-client3          0.6.23-4       Avahi client library
ii  libavahi-common3          0.6.23-4       Avahi common library
ii  libc6                     2.7-18         GNU C Library: Shared libraries
ii  libcurl3                  7.18.2-8       Multi-protocol file transfer libra
ii  libfaad0                  2.6.1-3.1      freeware Advanced Audio Decoder - 
ii  libflac8                  1.2.1-1.2      Free Lossless Audio Codec - runtim
ii  libglib2.0-0              2.16.6-1       The GLib library of C routines
ii  libid3tag0                0.15.1b-10     ID3 tag reading library from the M
ii  libjack0                  0.116.1-3      JACK Audio Connection Kit (librari
ii  libmad0                   0.15.1b-4      MPEG audio decoder library
ii  libmpcdec3                1.2.2-1        Musepack (MPC) format library
ii  libogg0                   1.1.3-4        Ogg Bitstream Library
ii  libpulse0                 0.9.10-3       PulseAudio client libraries
ii  libsamplerate0            0.1.4-1        audio rate conversion library
ii  libshout3                 2.2.2-5        MP3/Ogg Vorbis broadcast streaming
ii  libvorbis0a               1.2.0.dfsg-3.1 The Vorbis General Audio Compressi
ii  libvorbisenc2             1.2.0.dfsg-3.1 The Vorbis General Audio Compressi
ii  libvorbisfile3            1.2.0.dfsg-3.1 The Vorbis General Audio Compressi
ii  libwavpack1               4.50.1-1       an audio codec (lossy and lossless

mpd recommends no packages.

Versions of packages mpd suggests:
ii  ario [mpd-client]     1.1-1              GTK+ client for the Music Player D
ii  avahi-daemon          0.6.23-4           Avahi mDNS/DNS-SD daemon
ii  glurp [mpd-client]    0.11.6-4           gtk2.4+ frontend to the Music Play
ii  icecast2              2.3.2-2            Ogg Vorbis and MP3 streaming media
ii  mpc [mpd-client]      0.14-1             A command-line tool to interface M
ii  ncmpc [mpd-client]    0.11.1+svn-r3965-2 text based audio player
pn  pulseaudio            <none>             (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to