Package: pwauth
Version: 2.3.11-0.2

Dear maintainer,

the pwauth binary is installed with the following permissions:

-rwsr-xr-x 1 root www-data 10232 sept. 25  2016 /usr/sbin/pwauth

If it is intended to be used by web servers only, shouldn't permissions be

-rwsr-x--- 1 root www-data 10232 sept. 25  2016 /usr/sbin/pwauth

instead ?

-- 
Laurent.

Reply via email to