Package: rygel Version: 0.20.3-1 Severity: normal Dear Maintainer,
By default rygel allows upload and deletion of files. As a user will likely start rygel using the minimal gnome sharing user GUI, he may not understand that all his files could be deleted neither anyone can fill modify his files or fill his disk. So I would rather change the setting so the upload and deletion are disabled. Moreover almost all usable DLNA client are only players/controllers and don't support upload/deletion of files. So basically, it a security hole without any useability counterpart. Best regards -- System Information: Debian Release: jessie/sid APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rygel depends on: ii libc6 2.17-97 ii libgee-0.8-2 0.10.5-1 ii libglib2.0-0 2.36.4-1 ii libgssdp-1.0-3 0.14.6-1 ii libgstreamer-plugins-base1.0-0 1.2.2-1 ii libgstreamer1.0-0 1.2.2-1 ii libgupnp-1.0-4 0.20.9-1 ii libgupnp-av-1.0-2 0.12.4-1 ii libgupnp-dlna-2.0-3 0.10.2-1 ii librygel-core-2.0-1 0.20.3-1 ii librygel-renderer-2.0-1 0.20.3-1 ii librygel-server-2.0-1 0.20.3-1 ii libsoup2.4-1 2.44.2-1 ii libsqlite3-0 3.8.2-1 ii libunistring0 0.9.3-5 ii libuuid1 2.20.1-5.6 ii libxml2 2.9.1+dfsg1-3 Versions of packages rygel recommends: ii gstreamer1.0-libav 1.2.2-1 ii gstreamer1.0-plugins-base 1.2.2-1 ii gstreamer1.0-plugins-good 1.2.2-1 ii gstreamer1.0-plugins-ugly 1.2.2-1 Versions of packages rygel suggests: pn rygel-mediathek <none> ii rygel-playbin 0.20.3-1 ii rygel-preferences 0.20.3-1 pn rygel-tracker <none> pn tumbler <none> -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
