** Description changed:

- https://bugs.debian.org/691309 is back, in the form of
- https://bugs.debian.org/885454
+ [Bug]
+ https://bugs.debian.org/691309 is back, in the form of 
https://bugs.debian.org/885454
  
  Holger did some clean-up in 2.0.33-2 to the maintainer scripts, and
  removed the bit that set ownership of directories to the (dynamically
  created) munin users.
+ 
+ [Impact]
+ munin-async is unusable. munin-node config files that are not expected to be 
world-readable may be.
+ 
+ [Regression Potential]
+ changing directory ownership of an existing directory, in maintainer scripts, 
isn't ideal. But I've restricted it to just upgrades from 2.0.37-1.
+ The risk should be pretty minimal
+ 
+ [Test Case]
+ # apt install munin-async
+ # ls -ld /var/lib/munin-async/
+ 
+ If it belongs to root, that's bad.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1770569

Title:
  munin-async can't write to /var/lib/munin-async

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/munin/+bug/1770569/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to