Package: bind9 Version: 1:9.7.3.dfsg-1~squeeze8 Severity: normal
After a recent bind9 security upgrade (and probably after previous upgrades too), our config management system reported that /etc/bind/named.conf.local had had its group owner changed from the one we'd configured to the group "bind". Presumably it was the package upgrade that caused this. Shouldn't /etc/bind/named.conf.local be a configuration file controlled by the system administrator without unwanted subversion of either content or metadata by the package manager? -- System Information: Debian Release: 6.0.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32.33-kvm-i386-20111128-dirty (SMP w/1 CPU core) Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages bind9 depends on: ii adduser 3.112+nmu2 add and remove users and groups ii bind9utils 1:9.7.3.dfsg-1~squeeze8 Utilities for BIND ii debconf [debconf 1.5.36.1 Debian configuration management sy ii libbind9-60 1:9.7.3.dfsg-1~squeeze8 BIND9 Shared Library used by BIND ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libcap2 1:2.19-3 support for getting/setting POSIX. ii libdb4.8 4.8.30-2 Berkeley v4.8 Database Libraries [ ii libdns69 1:9.7.3.dfsg-1~squeeze8 DNS Shared Library used by BIND ii libgssapi-krb5-2 1.8.3+dfsg-4squeeze6 MIT Kerberos runtime libraries - k ii libisc62 1:9.7.3.dfsg-1~squeeze8 ISC Shared Library used by BIND ii libisccc60 1:9.7.3.dfsg-1~squeeze8 Command Channel Library used by BI ii libisccfg62 1:9.7.3.dfsg-1~squeeze8 Config File Handling Library used ii libldap-2.4-2 2.4.23-7.2 OpenLDAP libraries ii liblwres60 1:9.7.3.dfsg-1~squeeze8 Lightweight Resolver Library used ii libssl0.9.8 0.9.8o-4squeeze13 SSL shared libraries ii libxml2 2.7.8.dfsg-2+squeeze5 GNOME XML library ii lsb-base 3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip ii net-tools 1.60-23 The NET-3 networking toolkit ii netbase 4.45 Basic TCP/IP networking system bind9 recommends no packages. Versions of packages bind9 suggests: pn bind9-doc <none> (no description available) ii dnsutils 1:9.7.3.dfsg-1~squeeze8 Clients provided with BIND pn resolvconf <none> (no description available) pn ufw <none> (no description available) -- Configuration Files: /etc/bind/named.conf.local changed [not included] -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
