[Pkg-openssl-devel] Bug#584911: Bug#584911: bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble

[Julien Cristau]

On Wed, Jun  9, 2010 at 18:59:37 +0200, Kurt Roeckx wrote:

> severity 584911 important
> thanks
> 
> On Tue, Jun 08, 2010 at 09:03:13PM +0000, Debian Bug Tracking System wrote:
> > Processing commands for control at bugs.debian.org:
> > 
> > > reassign 584911 openssl 0.9.8g-15+lenny6
> > Bug #584911 [bind9] bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble
> 
> I agree that the documentation does not match the behaviour.
> 
> As far as I know, there never is a reason to remove the
> world-readable permission, so I'm lowering the severity.
> 
> I should probably move that file to the libssl0.9.8 package.
> 
configuration files in shared library packages are a bad idea.  Even
worse if they're not versioned.

Cheers,
Julien
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20100609/ddb9f256/attachment.pgp>