Your message dated Mon, 1 Nov 2010 12:55:52 +0100
with message-id <[email protected]>
and subject line already fixed
has caused the Debian Bug report #596055,
regarding fai-server: fai-setup modifies loguser in a way that triggers a
warning from security-auditor tiger
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
596055: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596055
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fai-server
Version: 3.2.17~lenny1
Severity: minor
Line 75 in fai-setup changes the /etc/passwd-line for the specified log-user
with explanation that "there's a bug when the encrypted password is !, so
change it to *".
On the one hand there should be a link or more detailed description for the bug.
On the other hand shadow-passwords are default on debian systems. So the line in
/etc/passwd never includes a ! in the password field (it's a "x" in this case).
This makes the change needless, if the bug doesn't exist for a "x" in the
password
field, but triggers a message from the security-audit tool tiger:
# Verifying system specific password checks...
--WARN-- [pass20w] Login ID fai is not configured to use shadow passwords.
I suggest to remove the line or at least check if shadow passwords are enabled
and thus the bug doesn't occur. Furthermore give a hint where to find more
information
about the bug - or simply fix it. ;-)
-- System Information:
Debian Release: 5.0.4
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages fai-server depends on:
ii debootstrap 1.0.10lenny1 Bootstrap a basic Debian system
ii fai-client 3.2.17~lenny1 Fully Automatic Installation clien
Versions of packages fai-server recommends:
ii dhcp3-server 3.1.1-6+lenny4 DHCP server for automatic IP addre
ii inetutils-inetd [inet-su 2:1.5.dfsg.1-9 internet super server
ii nfs-kernel-server 1:1.1.2-6lenny2 support for NFS kernel server
ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh
ii openssh-server 1:5.1p1-5 secure shell server, an rshd repla
ii syslinux-common 2:3.71+dfsg-5 Kernel loader which uses a FAT, ex
ii tftpd-hpa 0.48-2.3 HPA's tftp server
Versions of packages fai-server suggests:
ii apt-move 4.2.27-1+b5 Maintain Debian packages in a pack
ii aptitude 0.4.11.11-1~lenny1 terminal-based package manager
pn debmirror <none> (no description available)
ii genisoimage 9:1.1.9-1 Creates ISO-9660 CD-ROM filesystem
ii grub 0.97-47lenny2 GRand Unified Bootloader (Legacy v
pn libproc-daemon-perl <none> (no description available)
pn perl-tk <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
Package: fai
Version: 3.4.3
This package was fixed in version 3.4.3.
--- End Message ---
