Your message dated Sat, 2 May 2020 15:56:40 +0200
with message-id <[email protected]>
and subject line Re: /usr/bin/logger: /usr/bin/logger allows anyone to write to
/var/log/syslog
has caused the Debian Bug report #916506,
regarding /usr/bin/logger: /usr/bin/logger allows anyone to write to
/var/log/syslog
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
916506: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916506
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: bsdutils
Version: 1:2.29.2-1+deb9u1
Severity: normal
File: /usr/bin/logger
Dear Maintainer,
I was surprised to find that I can write anything I want to
/var/log/syslog using the /usr/bin/logger program as a non-root user.
My user account has no permissions on /var/log/syslog, it can't even
read it.
-- System Information:
Debian Release: 9.6
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-8-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages bsdutils depends on:
ii libc6 2.24-11+deb9u3
ii libsystemd0 232-25+deb9u6
Versions of packages bsdutils recommends:
ii bsdmainutils 9.0.12+nmu1
bsdutils suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
As explained by Andreas, this is not a bug in util-linux.
Thanks,
Chris
--- End Message ---
