On Sat, May 28, 2016 at 09:52:30PM +0200, Sebastian Andrzej Siewior wrote: > On 2008-04-06 15:04:58 [+0200], Lionel Elie Mamane wrote:
>> OK, fair enough. If only Debian patches it, people using Debian >> will write scripts using genrsa that are dangerous on other >> OSes. I've emailed upstream with the suggestion, we'll see what >> they think of it. > Upstream suggested to use safe umask. Are you fine with me closing > this bug? I disagree with upstream but am not going to fight it. Leaving this bug open indefinitely without intending to ever fix it does not make sense indeed. -- Lionel