[Pkg-sysvinit-devel] Bug#295335: marked as done (Manpage improvements for lastb)

Wed Nov 23 20:04:13 UTC 2005

Your message dated Wed, 23 Nov 2005 21:59:56 +0100
with message-id <4384D84C.7020407 at yahoo.co.uk>
and subject line done
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 15 Feb 2005 08:02:50 +0000
>From jfs at computer.org Tue Feb 15 00:02:50 2005
Return-path: <jfs at computer.org>
Received: from 148.red-213-96-98.pooles.rima-tde.net (silicio) [213.96.98.148] (Debian-exim)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1D0xfW-00086D-00; Tue, 15 Feb 2005 00:02:50 -0800
Received: from jfs by silicio with local (Exim 4.44)
	id 1D0xeh-0006op-Ow; Tue, 15 Feb 2005 09:01:59 +0100
Date: Tue, 15 Feb 2005 09:01:59 +0100
From: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <jfs at computer.org>
To: submit at bugs.debian.org
Subject: Manpage improvements for lastb
Message-ID: <20050215080159.GA25778 at silicio>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="bCsyhTFzCvuiizWE"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--bCsyhTFzCvuiizWE
Content-Type: multipart/mixed; boundary="liOOAslEiF7prFVr"
Content-Disposition: inline


--liOOAslEiF7prFVr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


Package: sysvinit=20
Version: 2.86.ds1-1
Priority: wishlist
Tags: patch

The lastb(1) manpage (well, actually last(1)) fails to mention
that, in order to get any login programs to write into btmp,
the file should not be world readable.

The attached patch introduces an ammendment to the manpage
to reflect this, feel free to modify it as needed.

Regards

Javier

--liOOAslEiF7prFVr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="sysvinit-lastb.diff"
Content-Transfer-Encoding: quoted-printable

diff -Nru sysvinit-2.86.ds1/man/last.1 sysvinit-2.86.ds1.new/man/last.1

--- sysvinit-2.86.ds1/man/last.1	2004-07-30 13:39:18.000000000 +0200
+++ sysvinit-2.86.ds1.new/man/last.1	2005-02-15 08:58:19.000000000 +0100
@@ -83,6 +83,11 @@
 configuration issue. If you want the files to be used, they can be
 created with a simple \fBtouch\fP(1) command (for example,=20
 \fItouch /var/log/wtmp\fP).
+.PP
+Moreover, since the \fIbtmp\fP file might contain sensitive information
+that might be useful for a local attacker, this file is only logged
+to if it is not world readable. In order to get login programs to
+write there you need to \fIchmod 640 /var/log/btmp\fP).
 .\"{{{  Files
 .SH FILES
 /var/log/wtmp

--liOOAslEiF7prFVr--

--bCsyhTFzCvuiizWE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCEax3sandgtyBSwkRAjzQAJ9/u546L9fsDjM99thZ3v7eepsqsQCfTLls
De3AUMtExq238Nf4HgdmKeg=
=va7g
-----END PGP SIGNATURE-----

--bCsyhTFzCvuiizWE--

---------------------------------------
Received: (at 295335-done) by bugs.debian.org; 23 Nov 2005 20:00:38 +0000
>From jdthood at yahoo.co.uk Wed Nov 23 12:00:37 2005
Return-path: <jdthood at yahoo.co.uk>
Received: from mailservice.tudelft.nl ([130.161.131.5])
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1Ef0nA-0004ET-EC
	for 295335-done at bugs.debian.org; Wed, 23 Nov 2005 12:00:35 -0800
Received: from localhost (localhost [127.0.0.1])
	by rav.antivirus (Postfix) with ESMTP id A3F4122F820
	for <295335-done at bugs.debian.org>; Wed, 23 Nov 2005 21:00:01 +0100 (CET)
Received: from snurk.tiscali.nl (x087.decis.nl [130.161.177.87])
	by mx1.tudelft.nl (Postfix) with ESMTP id 7569F22F81F
	for <295335-done at bugs.debian.org>; Wed, 23 Nov 2005 21:00:01 +0100 (CET)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by snurk.tiscali.nl (Postfix) with ESMTP id 7A4EC4008A
	for <295335-done at bugs.debian.org>; Wed, 23 Nov 2005 21:59:57 +0100 (CET)
Message-ID: <4384D84C.7020407 at yahoo.co.uk>
Date: Wed, 23 Nov 2005 21:59:56 +0100
From: Thomas Hood <jdthood at yahoo.co.uk>
User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051013)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: 295335-done at bugs.debian.org
Subject: done
X-Enigmail-Version: 0.92.1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at tudelft.nl
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_00,ONEWORD autolearn=no 
	version=2.60-bugs.debian.org_2005_01_02

This was done in sysvinit (2.86.ds1-5).

-- 
Thomas Hood

