Your message dated Sun, 30 Jun 2013 19:03:31 +0000
with message-id <e1utmuj-0007fv...@franck.debian.org>
and subject line Bug#709972: fixed in kdenetwork 4:4.8.4-3
has caused the Debian Bug report #709972,
regarding kppp doesn't need to run suid
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
709972: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709972
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: kppp
Version: 4:4.8.4-1
Severity: serious
Tags: security
X-Debbugs-CC: secur...@debian.org
Hi maintainers,
According to Ilja's report [1] about Linux desktop security, there is
no need to run kppp suid.
According to kppp FAQ:
""There is no need for the setuid bit, if you know a bit of UNIX®
systems administration. Simply create a modem group, add all users
that you want to give access to the modem to that group and make the
modem device read/writable for that group.""
[1]: http://lists.x.org/archives/xorg-devel/2013-May/036291.html, p34 and onward
Regards
--
Mathieu Parent
--- End Message ---
--- Begin Message ---
Source: kdenetwork
Source-Version: 4:4.8.4-3
We believe that the bug you reported is fixed in the latest version of
kdenetwork, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 709...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Maximiliano Curia <m...@debian.org> (supplier of updated kdenetwork package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 30 Jun 2013 18:54:50 +0200
Source: kdenetwork
Binary: kdenetwork kdenetwork-filesharing kget libkopete4 kopete libkopete-dev
kppp krdc krfb kdenetwork-dbg kde-zeroconf
Architecture: source all amd64
Version: 4:4.8.4-3
Distribution: unstable
Urgency: low
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Maximiliano Curia <m...@debian.org>
Description:
kde-zeroconf - zeroconf plugins and kio slaves for KDE
kdenetwork - networking applications from the official KDE 4 release
kdenetwork-dbg - debugging symbols for the KDE networking module
kdenetwork-filesharing - network filesharing configuration module
kget - download manager
kopete - instant messaging and chat application
kppp - modem dialer for KDE
krdc - Remote Desktop Connection client
krfb - Desktop Sharing utility
libkopete-dev - development files for the Kopete instant messaging and chat
appli
libkopete4 - main Kopete library
Closes: 709972 713770
Changes:
kdenetwork (4:4.8.4-3) unstable; urgency=low
.
* Remove setiud bit to the kppp binary. (Closes: #709972)
* Bump debhelper build-dep and compat to 9.
* Update uploaders.
* Add myself to uploaders.
* Bump Standards-Version to 3.9.4, no changes needed.
* New patch: add_libpthread_to_krfb.diff. (Closes: #713770)
* Update kppp lintian-overrides.
Checksums-Sha1:
022a3ca54560e8f3d187c710f4fe1ae701d1cb50 3341 kdenetwork_4.8.4-3.dsc
241cb1590c61117550f11d1ce5acee07317c2989 44842 kdenetwork_4.8.4-3.debian.tar.gz
79c1b1a5944f0f4469dd90eab8d0f1696ada39cb 16258 kdenetwork_4.8.4-3_all.deb
8c93b6c6cd5f0fbb7ecca50caca9df8dce6aa0eb 36774
kdenetwork-filesharing_4.8.4-3_amd64.deb
4021960f0537890ee21ee73e07bd5c5388226f38 1549190 kget_4.8.4-3_amd64.deb
8c5d38c1e3cae2772de271509d8b4eba641213fd 355526 libkopete4_4.8.4-3_amd64.deb
5b237207472bb6257db7915b7bb8701635d202a0 6750034 kopete_4.8.4-3_amd64.deb
63a225636320729ebe567d7e8116c1d50cb5b884 94072 libkopete-dev_4.8.4-3_amd64.deb
b9d80a77e5b04ab3c01619405ef664690f871876 798188 kppp_4.8.4-3_amd64.deb
d32817e300fbcd758da3d1eef0c50b471c8b6ffe 458220 krdc_4.8.4-3_amd64.deb
d9472290901f47dacdaab1f1ce9554313eb51873 443764 krfb_4.8.4-3_amd64.deb
f716d8f633f53ced4865ef4453f88681dbb59f40 76362256
kdenetwork-dbg_4.8.4-3_amd64.deb
b779b58ffc74adaaf3235236e6b54733a7f1adf8 38282 kde-zeroconf_4.8.4-3_amd64.deb
Checksums-Sha256:
8608ff26f3e9bc6f9453a5932aa3b2390334b4ddfa80aa3646df228a62855ae7 3341
kdenetwork_4.8.4-3.dsc
15569139b69a01907a0ed8cf4c33e471ebeb483d60393a1ac6bdef825621be54 44842
kdenetwork_4.8.4-3.debian.tar.gz
65b310f31ecee1bc7ed310f2be08a0065b04d5806680fcbf83d4c126d77d97f1 16258
kdenetwork_4.8.4-3_all.deb
baff671f384c8c29e65eced3717be195934542e4ad55a810904d182e4e42fb24 36774
kdenetwork-filesharing_4.8.4-3_amd64.deb
3abf088eb3294a7ce80de53f9dd27da1353bb21acb0ceb19f068edd9981643bf 1549190
kget_4.8.4-3_amd64.deb
5d5c9c18a5e55eaa01087582f9472cc4400e49bb728c414afa4d999cb9383bd7 355526
libkopete4_4.8.4-3_amd64.deb
ea755089ee8b70799cd06931d80ea0cedd8ab9196d2f0ce23357a412ba586a64 6750034
kopete_4.8.4-3_amd64.deb
b5af0e4ee28d35b2ebd917ad8b004ca80af7504b60c904e63df3f2b740c9ee31 94072
libkopete-dev_4.8.4-3_amd64.deb
dfbb83ac78d09be2a767a5202a211a552795ab4f53da26093bc7d62d01b279ff 798188
kppp_4.8.4-3_amd64.deb
e76e4072d242a61866eb853364b08222d48d030bf4e9103868a3ba662eeb258d 458220
krdc_4.8.4-3_amd64.deb
2820c8635172ec5f7b56d1617c6ce869a66528e29e423818400a9bf0d02d4392 443764
krfb_4.8.4-3_amd64.deb
6cc181285678045ceb0e79be5c00143366803b9a0114138c9c3e2753f1f88ee1 76362256
kdenetwork-dbg_4.8.4-3_amd64.deb
c0f56dc1df4b9a0488b0662d66877b14b71800b48e4578fd31af4b39870f585d 38282
kde-zeroconf_4.8.4-3_amd64.deb
Files:
11b297d85eeeb21044dcfae65273b193 3341 kde optional kdenetwork_4.8.4-3.dsc
1597092f026308a94635c6a6d948468f 44842 kde optional
kdenetwork_4.8.4-3.debian.tar.gz
ecbc4ea0f17c7ae9698ff635dd5de701 16258 kde optional kdenetwork_4.8.4-3_all.deb
61a7348d429cf85e5885ab87705e05d4 36774 net optional
kdenetwork-filesharing_4.8.4-3_amd64.deb
e2c947c733879e4cfb956ee7cac5a5a3 1549190 net optional kget_4.8.4-3_amd64.deb
1f54064bd4120844c3511a3cdef600ec 355526 libs optional
libkopete4_4.8.4-3_amd64.deb
35b79f4e4b9d9d09dab86c4899c0ced7 6750034 net optional kopete_4.8.4-3_amd64.deb
ef1d0a3810d93aa57b91ce168b241c76 94072 libdevel optional
libkopete-dev_4.8.4-3_amd64.deb
d8f5bf3a05aa82ffb1dc414380f56eaf 798188 net optional kppp_4.8.4-3_amd64.deb
c3110b3aaad8d0bf1caa97dfc532e6c2 458220 net optional krdc_4.8.4-3_amd64.deb
b8ded789397c33472edea51d8fbe2fb0 443764 net optional krfb_4.8.4-3_amd64.deb
d7d8a598908f4af92b8eb21fad897bdc 76362256 debug extra
kdenetwork-dbg_4.8.4-3_amd64.deb
a517a0343b1a2d2f8978450da1642732 38282 kde extra kde-zeroconf_4.8.4-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=ZOfa
-----END PGP SIGNATURE-----
--- End Message ---
