Package: subversion
Version: 1.4.2dfsg1-2
Followup-For: Bug #415755

I'd like to follow up on Bug Report #415755 (By Volker Assmann - a
previous co-worker :-). Subversion doesn't only store Passwords by
default cleartext in the users home directory. The Files in
~/.subversion/auth/svn.simple/* are also _world_ readable.

I guess alot of people will use rather strong passwords for source
repositorys. If the passwords are stored cleartext the file should at
least not be readable by anyone else!

Probably this too is an upstream Bug.

Greetings,
Valentin


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-686
Locale: LANG=en_US.iso88591, [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages subversion depends on:
ii  libapr1                1.2.7-8.2         The Apache Portable Runtime Librar
ii  libc6                  2.3.6.ds1-13etch2 GNU C Library: Shared libraries
ii  libsvn1                1.4.2dfsg1-2      Shared libraries used by Subversio

subversion recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to