Bug#819893: libsasl2-modules:amd64: unnecessary exec perm on /etc/logcheck/ignore.d.server/libsasl2-modules

Calum Mackay calum.mackay at cdmnet.org
Sun Apr 3 15:34:42 UTC 2016


Package: libsasl2-modules
Version: 2.1.26.dfsg1-14+b1
Severity: normal

The file:

	/etc/logcheck/ignore.d.server/libsasl2-modules

is delivered as mode 0755, whereas every other file in that directory is
mode 0644.

Unneeded exec perms could, at a stretch, be considered a security issue.

thanks much,
calum.


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libsasl2-modules:amd64 depends on:
ii  libc6        2.22-3
ii  libssl1.0.2  1.0.2g-1

libsasl2-modules:amd64 recommends no packages.

Versions of packages libsasl2-modules:amd64 suggests:
pn  libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal  <none>
pn  libsasl2-modules-ldap                                          <none>
pn  libsasl2-modules-otp                                           <none>
pn  libsasl2-modules-sql                                           <none>

-- Configuration Files:
/etc/logcheck/ignore.d.server/libsasl2-modules [Errno 13] Permission denied: u'/etc/logcheck/ignore.d.server/libsasl2-modules'

-- no debconf information



More information about the Pkg-cyrus-sasl2-debian-devel mailing list