Package: bind9-host
Version: 1:9.6.0.dfsg.P1-2
Severity: grave
Justification: renders package unusable
When running host as an ordinare user, following error is produced:
[0:0][azat...@azabox prog]$ host dn.se
Auto configuration failed
3077928672:error:0200100D:system library:fopen:Permission
denied:bss_file.c:126:fopen('/usr/lib/ssl/openssl.cnf','rb')
3077928672:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:131:
3077928672:error:0E078002:configuration file routines:DEF_LOAD:system
lib:conf_def.c:199:
looking at that file, which is an symlink, it is shown that it is
chodded 0400:
[0:1][azat...@azabox ~]$ ll /usr/lib/ssl/openssl.cnf
lrwxrwxrwx 1 root root 20 3 jun 19.50 /usr/lib/ssl/openssl.cnf ->
/etc/ssl/openssl.cnf
[0:0][azat...@azabox ~]$ ll /etc/ssl/openssl.cnf
-r-------- 1 root root 9374 18 okt 2005 /etc/ssl/openssl.cnf
Either this is an bug in openssl, or an bug in this package, and if it
is such that this package is faulty, then either should host be suid
root, or moved to sbin.
/Carl
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.29-2-686 (SMP w/1 CPU core)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to sv_SE.UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages bind9-host depends on:
ii libbind9-50 1:9.6.0.dfsg.P1-2 BIND9 Shared Library used by BIND
ii libc6 2.9-13 GNU C Library: Shared libraries
ii libcap2 2.16-2 support for getting/setting POSIX.
ii libdns50 1:9.6.0.dfsg.P1-2 DNS Shared Library used by BIND
ii libgssapi-krb5-2 1.7dfsg~beta3-1 MIT Kerberos runtime libraries - k
ii libisc50 1:9.6.0.dfsg.P1-2 ISC Shared Library used by BIND
ii libisccfg50 1:9.6.0.dfsg.P1-2 Config File Handling Library used
ii liblwres50 1:9.6.0.dfsg.P1-2 Lightweight Resolver Library used
ii libssl0.9.8 0.9.8k-1 SSL shared libraries
ii libxml2 2.7.3.dfsg-1 GNOME XML library
bind9-host recommends no packages.
bind9-host suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
