Package: firehol Version: 1.231-6 Severity: grave Tags: patch File: /etc/init.d/firehol
`Switch initfile to LSB conformance' in 1.231-6 uses bash specific `source' command instead of `.' and thus the script fails to load firewall rules for those having /bin/sh linked to /bin/dash, which decreases their preferred security level. The fix is simple: --- /etc/init.d/firehol-1.231-6 2006-09-29 18:51:26.000000000 +0200 +++ /etc/init.d/firehol 2006-10-02 17:03:23.000000000 +0200 @@ -11,7 +11,7 @@ ### END INIT INFO #includes lsb functions -source /lib/lsb/init-functions +. /lib/lsb/init-functions PATH=/sbin:/bin NAME=firehol -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.6.17-2-vserver-k7 Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8) Versions of packages firehol depends on: ii bash 3.1-5 The GNU Bourne Again SHell ii iproute 20060323-1 Professional tools to control the ii iptables 1.3.5.0debian1-1 Linux kernel 2.4+ iptables adminis ii net-tools 1.60-17 The NET-3 networking toolkit Versions of packages firehol recommends: ii curl 7.15.5-1 Get a file from an HTTP, HTTPS, FT ii module-init-tools 3.2.2-3 tools for managing Linux kernel mo ii modutils 2.4.27.0-6 Linux module utilities ii wget 1.10.2-2 retrieves files from the web -- no debconf information -- =*= Łukasz Pankowski =*=