Processed: severity -> important: since it makes Debian appear to be insecure by default

2022-09-21 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 1020417 important
Bug #1020417 [plasma-vault] plasma-vault: encfs security warning during 
Debian-Installer when KDE desktop selected
Severity set to 'important' from 'normal'
> user debian...@lists.debian.org
Setting user to debian...@lists.debian.org (was p...@hands.com).
> usertag 1020417 openqa
There were no usertags set.
Usertags are now: openqa.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1020417: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020417
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1020417: plasma-vault: encfs security warning during Debian-Installer when KDE desktop selected

2022-09-21 Thread Philip Hands
Package: plasma-vault
Version: 5.25.4-1
Severity: normal

Attached is a screenshot from installing Debian with KDE selected as the Desktop
Environment.

As you can see, it's giving a scarry looking security warning, which is probably
not the first impression we want to present.

My asumption is that when selecting KDE, one pulls in plasma-vault, which in
turn depends upon encfs, which results in this message being presented to the
user.

Is encfs essential to the operation of plasma-vault? If not, perhaps it could be
dropped from a recommends to a suggests?

BTW You can see a test install of KDE here, with the warning:

  https://openqa.debian.net/tests/77193#step/grub/3

Cheers, Phil.