tags 466146 pending thanks On Sun, Feb 17, 2008 at 05:51:38AM +0000, Tim Brown wrote: > Can I suggest that a password is set (perhaps take a look at the Debian MySQL > server package which does something similar for the debian-sys-maint in > the /etc/mysql/debian.cnf file). Limiting access to local hosts is an > improvement, but as noted it does not guard against local privilege > escalation attacks.
I have now added this feature. A package is ready for testing at mentors: dget -x http://mentors.debian.net/debian/pool/main/f/festival/festival_1.96~beta-6.dsc Please note that I now use debconf to ask for the password to be entered. I have tested that the system works fine, but as this is my first debconf experience, a quick review would be appreciated, followed by upload, as this is a security bug. Thanks. Kumar -- Kumar Appaiah, 458, Jamuna Hostel, Indian Institute of Technology Madras, Chennai - 600 036
signature.asc
Description: Digital signature