Package: freeipmi-tools
Version: 1.6.4-3
Severity: minor
X-Debbugs-Cc: 

The ipmi-console command can be executed by any normal user and doesn't
require "system administrator" (aka "root") permission., IMHO, it should
hence be installed to /usr/bin, and not to /usr/sbin., The fact that you
are accessing an IPMO SoL console of another machine, (of which you may
be the system administrator) doesn't mean you have to be the system
administrator of the client running ipmi-console.

Debian FHS 3.0 states:

> Utilities used for system administration (and other root-only
> commands) are stored in /sbin, /usr/sbin, and /usr/local/sbin.

This implies that not only the "other" commands but also the utilities
for system-administration are "root-only" - which in the case of
ipmi-console they clearly are not.

I'm not familiar enough with other parts of freeipmi-tools, there
might be more commands that share a similar situation.



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.9.0-4-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freeipmi-tools depends on:
ii  freeipmi-common  1.6.4-3
ii  libc6            2.31-6
ii  libfreeipmi17    1.6.4-3
ii  libipmiconsole2  1.6.4-3
ii  libipmidetect0   1.6.4-3

freeipmi-tools recommends no packages.

Versions of packages freeipmi-tools suggests:
pn  freeipmi-bmc-watchdog  <none>
pn  freeipmi-ipmidetect    <none>

-- no debconf information

Reply via email to