Package: fuse-utils Version: 2.7.4-1.1 Severity: normal The postinst of fuse-utils creates the group fuse and sets the permissions of fusermount to root:fuse 4754. Before that happens, fusermount has the permissions specified in the deb, namely root:root 4755. Thus, during the installation of fuse, any user can mount a FUSE filesystem without needing membership in group fuse.
To fix this, fuse-utils could ship fusermount with more restrictive permissions, such as 0644. - Josh Triplett -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.27-rc9-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages fuse-utils depends on: ii adduser 3.110 add and remove users and groups ii libc6 2.7-15 GNU C Library: Shared libraries ii libfuse2 2.7.4-1.1 Filesystem in USErspace library ii sed 4.1.5-8 The GNU sed stream editor ii udev 0.125-7 /dev/ and hotplug management daemo fuse-utils recommends no packages. fuse-utils suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
