Package: yrmcds Version: 1.0.4-6 Severity: important Tags: security Dear Maintainer,
the daemon doesn't start at all on jessie with systemd without further
help. Additionally the way it seems to be meant to contains a security
related issue with predictable temp dir name.
It seems to expect directory /var/tmp/yrmcds writable by the daemon.
The ExecStartpre in the systemd file doesn't seem to get executed, also
it wouldn't be created with permission of the yrmcds user neither.
This needs to get addressed in stable too from both general startup
point of view and also security related point of view.
Thanks,
Rhonda
--
strg.at gmbh
rho...@strg.at
gumpendorfer strasse 132/9, 1060 wien
tel +43 (1) 526 56 29
signature.asc
Description: Digital signature
