Bug#300560: mldonkey-server: downloads.ini writable by group users, world-readable

2005-04-11 Thread Sylvain LE GALL
Hello, On Mon, Apr 11, 2005 at 01:09:53PM +0200, Gerardo Di Giacomo wrote: I think that the best solution is to put a chmod after: /usr/bin/touch $new_mldonkey_dir/downloads.ini in mldonkey-server.postinst. Ok, thanks, i will consider this in the next version. Regard Sylvain Le Gall

Bug#300560: mldonkey-server: downloads.ini writable by group users, world-readable

2005-03-20 Thread Sylvain LE GALL
Hello, On Sun, Mar 20, 2005 at 03:15:24PM +0100, Rolf Leggewie wrote: Package: mldonkey-server Version: 2.5.28-2 Severity: grave Tags: security Justification: user security hole Sylvain, thank you for your work to package mldonkey-server. downloads.ini is created with permissions