[Debian-audit] Funny bug just got closed (Bug#298114: fixed in nvi 1.79-22)]

From: Javier Fernández-Sanguino Peña <jfs_at_debian.org>
Date: Mon, 7 Mar 2005 12:59:33 +0100

A "funny" bug I reported just got closed. Take a look at it, might be
interesting and enlightening on why shouldn't init scripts run (some tools)
as root.

I still have to push the maintainer to provide OpenBSD's recover file
instead since it does more sanity checks than the aged^Woriginal recover
script.

Regards

Javier

----- Forwarded message from Debian Bug Tracking System <owner_at_bugs.debian.org> -----
Source: nvi
Binary: nvi
Architecture: source i386
Version: 1.79-22
(...)
 nvi (1.79-22) unstable; urgency=low
 .
   * Create/fix /var/tmp/vi.recover in postinst (closes: #207720)
   * Take more care in handling of recovery files in nviboot. The nviboot
     script now ignores entries that are not regular files, calls sendmail
     as user "nobody", and send mail to the owner of the recover file, not
     the "To:" header in the recovery file. (closes: #298114)

Received on Mon Mar 07 2005 - 11:59:36 GMT

Mailing list overview.