Package: bsdutils Version: 1:2.29.2-1+deb9u1 Severity: normal File: /usr/bin/logger
Dear Maintainer, I was surprised to find that I can write anything I want to /var/log/syslog using the /usr/bin/logger program as a non-root user. My user account has no permissions on /var/log/syslog, it can't even read it. -- System Information: Debian Release: 9.6 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-8-amd64 (SMP w/6 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages bsdutils depends on: ii libc6 2.24-11+deb9u3 ii libsystemd0 232-25+deb9u6 Versions of packages bsdutils recommends: ii bsdmainutils 9.0.12+nmu1 bsdutils suggests no packages. -- no debconf information
