Package: fai-client
Version: 3.2.1
Severity: normal

Files and Dirs of the tree have protection 660 (root:adm).  That strange,
because 
        a) the missing x bit for dirs prevent user in the adm group to
           chdir to the logdir
        b) on the other hand the 'w' access to the log files let's users
           of the admin group manipulate the files.

I would suggest to use same protection for the log files as in /var/log
        files:  640  (root:adm)
        dirs:   750  (root:adm) 

Achim

-- System Information:
Debian Release: lenny/sid
  APT prefers gutsy-updates
  APT policy: (500, 'gutsy-updates'), (500, 'gutsy-security'), (500, 'gutsy')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-12-generic (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages fai-client depends on:
ii  file                      4.21-1         Determines file type using "magic"
ii  libapt-pkg-perl           0.1.21build2   Perl interface to libapt-pkg
ii  perl                      5.8.8-7ubuntu3 Larry Wall's Practical Extraction 

fai-client recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to