On Wed, Apr 07, 2010 at 10:44:12PM +0930, Arthur Marsh wrote: > File /etc/gw6c/gw6c.conf is world readable and can contain the > username and password. > > -rwxr--r-- 1 root root 10268 Dec 11 17:07 gw6c.conf.dpkg-dist ---end quoted text---
That's wierd, I just checked gw6c_6.0.1dfsg.1-8_i386.deb: $ dpkg -c /tmp/gw6c_6.0.1dfsg.1-8_i386.deb | grep conf | grep etc -rw------- root/root 10268 2009-12-28 15:12 ./etc/gw6c/gw6c.conf I wonder what happens during package upgrade though. -- أحمد المحمودي (Ahmed El-Mahmoudy) Digital design engineer GPG KeyID: 0xEDDDA1B7 GPG Fingerprint: 8206 A196 2084 7E6D 0DF8 B176 BC19 6A94 EDDD A1B7 -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

