Package: acct
Version: 6.3.5-39
Severity: critical
Tags: patch
Justification: causes serious data loss

-- System Information:
Debian Release: 3.1
 APT prefers testing
 APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-686-smp
Locale: LANG=en_US, LC_CTYPE=en_US

Versions of packages acct depends on:
ii  debconf                     1.4.30.10    Debian configuration management sy
ii  libc6                       2.3.2.ds1-18 GNU C Library: Shared libraries an

-- debconf information:
 acct/kernel_mismatch: false

-- Description:

/etc/cron.daily/acct that is installed calls the /etc/init.d/acct {start|stop}.

This init.d script does not have execute permissions.  This means that the 
savelog that occurs could happen during a write from the acct tool leading to 
dataloss.  One would be tempted to chmod u+x /etc/init.d/acct but it would be 
nice to add '/bin/sh /etc/init.d/acct' instead.  Hence, the simple patch below:

==== BEGIN ====
--- acct.orig 2005-02-02 11:14:51.000000000 -0800
+++ acct 2005-02-02 11:15:12.000000000 -0800
@@ -9,8 +9,8 @@
then
cd /var/account
savelog -g adm -m 0640 -u root -c 7 /var/account/pacct >/dev/null
- /etc/init.d/acct stop >/dev/null
- /etc/init.d/acct start >/dev/null
+ /bin/sh /etc/init.d/acct stop >/dev/null
+ /bin/sh /etc/init.d/acct start >/dev/null
fi
#
==== END ====




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Reply via email to