It doesn't make a lot of sense for bosserver to insist that /etc/openafs/server is world-readable on Debian. It's required upstream because bosserver may set up /etc/openafs (well, /usr/vice/etc with the default upstream paths) by creating symlinks into the /etc/openafs/server equivalent, but I don't believe that scenario could happen with the Debian package.
There isn't any particularly good reason for bosserver to insist on /etc/openafs/server-local being not world-readable; it's just always been that way. I'll see about getting that changed upstream. How did you end up with a world-readable KeyFile? What mechanism did you use to create the KeyFile? (That's a strong argument for keeping /etc/openafs/server locked down, unless we can fix whatever it was that created a world-readable KeyFile.) -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
