Package: munin-node
Version: 1.2.6-9
Severity: normal

Hello,

Has explain at http://munin.projects.linpro.no/wiki/Using_SNMP_plugins,
/etc/munin/plugin-conf.d/munin-node might contain snmp communities.

Having this file 644 is a security leak, 640 seems more sane.

Thanks.
@+,
        Fab


-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages munin-node depends on:
ii  adduser                 3.110            add and remove users and groups
ii  gawk                    1:3.1.5.dfsg-4.1 GNU awk, a pattern scanning and pr
ii  libnet-server-perl      0.97-1           An extensible, general perl server
ii  lsb-base                3.2-20           Linux Standard Base 3.2 init scrip
ii  perl                    5.10.0-19        Larry Wall's Practical Extraction 
ii  procps                  1:3.2.7-11       /proc file system utilities

Versions of packages munin-node recommends:
ii  libnet-snmp-perl              5.2.0-1    Script SNMP connections

Versions of packages munin-node suggests:
ii  ethtool                     6+20080913-1 display or change Ethernet device 
pn  libdbd-pg-perl              <none>       (no description available)
pn  liblwp-useragent-determined <none>       (no description available)
pn  libnet-irc-perl             <none>       (no description available)
ii  libwww-perl                 5.813-1      WWW client/server library for Perl
ii  lm-sensors                  1:3.0.2-1+b2 utilities to read temperature/volt
ii  munin                       1.2.6-9      network-wide graphing framework (g
pn  munin-plugins-extra         <none>       (no description available)
pn  mysql-client                <none>       (no description available)
ii  python                      2.5.2-3      An interactive high-level object-o
ii  smartmontools               5.38-2       control and monitor storage system

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to