Package: ser2net
Version: 2.9.1-1
Severity: normal

Dear Maintainer,

current stable (jessie) version is probably build without --with-tcp-wrappers 
option enabled.

   * What led up to the situation?

/etc/hosts.(allow|deny) is ignored for ser2net

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

put "ser2net: ALL" in /etc/hosts.deny

   * What was the outcome of this action?

connection were established and serial port were accessible

   * What outcome did you expect instead?

Error message saying access denied as it should based on manpage ser2net(8) 
section SECURITY

   * additional info

libwrap.so.0 is missing in library dependencies for official build:
# ldd /usr/sbin/ser2net-orignal
        linux-vdso.so.1 (0x00007ffd1d7e9000)
        libnsl.so.1 => /lib/x86_64-linux-gnu/libnsl.so.1 (0x00007f117c7f2000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f117c449000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f117ca15000)

# ldd /usr/sbin/ser2net-modified
        linux-vdso.so.1 (0x00007ffd0d52b000)
        libnsl.so.1 => /lib/x86_64-linux-gnu/libnsl.so.1 (0x00007f3f8650e000)
>>>>>>  libwrap.so.0 => /lib/x86_64-linux-gnu/libwrap.so.0 (0x00007f3f86303000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f3f85f59000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f3f86731000)


-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ser2net depends on:
ii  initscripts  2.88dsf-59
ii  libc6        2.19-18

ser2net recommends no packages.

Versions of packages ser2net suggests:
ii  telnet  0.17-36

-- Configuration Files:
/etc/ser2net.conf changed [not included]

-- no debconf information


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to