I just released FAI version 3.3.5 which fixes some security bugs in install_packages, because it write some files to world-writeable directories. These bugs are only a problem if you are using dirinstall or if you are using dselect-upgrade in packages_config during softupdate.
You can get the newest version by adding this line to sources.list deb http://www.informatik.uni-koeln.de/fai/download lenny koeln -- regards Thomas
