packaging seems ok to me, but there are some system() calls which makes me feel
unconfortable:
debian/patches/06_stolen_from_head.dpatch:+ system(config[CONFIG_SCRIPT]);
Other files have non standard permission as well:
W: vpnc: non-standard-dir-perm etc/vpnc/ 0700 != 0755
W: vpnc: non-standard-file-perm etc/vpnc/example.conf 0600 != 0644
Requesting some review from the security team
** Changed in: vpnc (Ubuntu)
Assignee: Didier Roche (didrocks) => Ubuntu Security Team (ubuntu-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/801240
Title:
[MIR] vpnc
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vpnc/+bug/801240/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
