Package: apache2.2-common Version: 2.2.3-1 Severity: important
suexec is installed by apache2.2-common as: -rwxr-xr-x 1 root root 10468 2006-10-02 17:19 /usr/lib/apache2/suexec therefore it cannot perform its job, that is change user identities. The suexec man page states that suexec must be installed with owner root and setuid bit set. More like: -r-sr-xr-x chmod a=rx,u+s suexec -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.17.11 Locale: LANG=en_GB.ISO-8859-15, LC_CTYPE=en_GB.ISO-8859-15 (charmap=ISO-8859-15) Versions of packages apache2.2-common depends on: ii apache2-utils 2.2.3-1 utility programs for webservers ii libmagic1 4.17-4 File type determination library us ii lsb-base 3.1-17 Linux Standard Base 3.1 init scrip ii mime-support 3.37-1 MIME files 'mime.types' & 'mailcap ii net-tools 1.60-17 The NET-3 networking toolkit apache2.2-common recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
