أحمد المحمودي wrote, on 07/04/10 23:37:
On Wed, Apr 07, 2010 at 10:44:12PM +0930, Arthur Marsh wrote:
File /etc/gw6c/gw6c.conf is world readable and can contain the
username and password.
-rwxr--r-- 1 root root 10268 Dec 11 17:07 gw6c.conf.dpkg-dist
---end quoted text---
That's wierd, I just checked gw6c_6.0.1dfsg.1-8_i386.deb:
$ dpkg -c /tmp/gw6c_6.0.1dfsg.1-8_i386.deb | grep conf | grep etc
-rw------- root/root 10268 2009-12-28 15:12 ./etc/gw6c/gw6c.conf
I wonder what happens during package upgrade though.
I wonder if I had inadvertently changed permissions on the file myself,
but I don't recall changing permissions on the file name ending with
dpkg-dist.
Originally I had been running gw6c compile the from source archive until
it became available as a Debian package.
Arthur.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
