Package: bind9-host
Version: 1:9.6.0.dfsg.P1-2
Severity: grave
Justification: renders package unusable

When running host as an ordinare user, following error is produced:
[0:0][azat...@azabox prog]$ host dn.se
Auto configuration failed
3077928672:error:0200100D:system library:fopen:Permission 
denied:bss_file.c:126:fopen('/usr/lib/ssl/openssl.cnf','rb')
3077928672:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:131:
3077928672:error:0E078002:configuration file routines:DEF_LOAD:system 
lib:conf_def.c:199:

looking at that file, which is an symlink, it is shown that it is
chodded 0400:
[0:1][azat...@azabox ~]$ ll /usr/lib/ssl/openssl.cnf
lrwxrwxrwx 1 root root 20  3 jun 19.50 /usr/lib/ssl/openssl.cnf -> 
/etc/ssl/openssl.cnf
[0:0][azat...@azabox ~]$ ll /etc/ssl/openssl.cnf
-r-------- 1 root root 9374 18 okt  2005 /etc/ssl/openssl.cnf

Either this is an bug in openssl, or an bug in this package, and if it
is such that this package is faulty, then either should host be suid
root, or moved to sbin.

/Carl

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.29-2-686 (SMP w/1 CPU core)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to sv_SE.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages bind9-host depends on:
ii  libbind9-50            1:9.6.0.dfsg.P1-2 BIND9 Shared Library used by BIND
ii  libc6                  2.9-13            GNU C Library: Shared libraries
ii  libcap2                2.16-2            support for getting/setting POSIX.
ii  libdns50               1:9.6.0.dfsg.P1-2 DNS Shared Library used by BIND
ii  libgssapi-krb5-2       1.7dfsg~beta3-1   MIT Kerberos runtime libraries - k
ii  libisc50               1:9.6.0.dfsg.P1-2 ISC Shared Library used by BIND
ii  libisccfg50            1:9.6.0.dfsg.P1-2 Config File Handling Library used 
ii  liblwres50             1:9.6.0.dfsg.P1-2 Lightweight Resolver Library used 
ii  libssl0.9.8            0.9.8k-1          SSL shared libraries
ii  libxml2                2.7.3.dfsg-1      GNOME XML library

bind9-host recommends no packages.

bind9-host suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to