[Pkg-roundcube-maintainers] Bug#608976: /etc/roundcube/debian-db.php is owned by (and writable by) www-data

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Feb 9 05:18:45 UTC 2011


Package: roundcube
Version: 0.5-2
Severity: normal

After installing version 0.5-2, i'm afraid that
/etc/roundcube/debian-db.php is still writable by www-data. :(

     --dkg


-- System Information:
Debian Release: 6.0
  APT prefers stable
  APT policy: (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages roundcube-core depends on:
ii  dbconfig-common          1.8.46          common framework for packaging dat
ii  debconf [debconf-2.0]    1.5.36.1        Debian configuration management sy
ii  libjs-jquery             1.4.2-2         JavaScript library for dynamic web
ii  libmagic1                5.04-5          File type determination library us
ii  nginx [httpd]            0.7.67-3        small, but very powerful and effic
ii  php-auth                 1.6.2-1         PHP PEAR modules for creating an a
ii  php-mail-mime            1.8.0-2         PHP PEAR module for creating MIME 
ii  php-mdb2                 2.5.0b2-1       PHP PEAR module to provide a commo
ii  php-net-smtp             1.4.2-3         PHP PEAR module implementing SMTP 
ii  php-net-socket           1.0.9-2         PHP PEAR Network Socket Interface 
ii  php5                     5.3.3-7         server-side, HTML-embedded scripti
ii  php5-gd                  5.3.3-7         GD module for php5
ii  php5-intl                5.3.3-7         internationalisation module for ph
ii  php5-mcrypt              5.3.3-7         MCrypt module for php5
ii  php5-pspell              5.3.3-7         pspell module for php5
ii  roundcube-pgsql          0.5-2           metapackage providing PostgreSQL d
ii  tinymce                  3.3.8+dfsg0-0.1 platform independent web based Jav
ii  ucf                      3.0025+nmu1     Update Configuration File: preserv

roundcube-core recommends no packages.

Versions of packages roundcube-core suggests:
ii  php-auth-sasl                 1.0.4-1    Abstraction of various SASL mechan

roundcube depends on no packages.

-- Configuration Files:
/etc/roundcube/db.inc.php changed [not included]

-- debconf information excluded





More information about the Pkg-roundcube-maintainers mailing list