[Pkg-openssl-devel] Bug#584911: Bug#584911: bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble

[Gebauer, Mirko (FRA-MRM)]

> > > reassign 584911 openssl 0.9.8g-15+lenny6
> > Bug #584911 [bind9] bind9: hard-coded dependency on
> "/usr/lib/ssl/openssl.cnf" might cause trouble
> 
> I agree that the documentation does not match the behaviour.
> 
> As far as I know, there never is a reason to remove the
> world-readable permission, so I'm lowering the severity.

The file could contain (default-)passwords (input_password, output_password), and therefore it could sometimes be preferred not to be world-readable.

I still don't understand why newer bind9-packages suddenly are so interested in this file, while previous versions seemingly didn't care about it.

Best regards,
Mirko Gebauer


</pre> This message contains information which may be confidential and privileged.Unless you <br>
are the intended recipient (or authorized to receive this message for the intended <br>
recipient), you may not use, copy, disseminate or disclose to anyone the message or <br>
any information contained in the message. If you have received the message in error, <br>
please advise the sender by reply e-mail, and delete the message. <br>
Thank you very much. <br>
(A) <pre>