Package: pgbouncer
Version: 1.3.1-1
Severity: important

Since /etc/pgbouncer/pgbouncer.ini and userlist.txt often contain passwords, 
it's probably not a good idea to install them with group and other read 
permissions.  An administrator could of course revoke the permissions before 
putting passwords in there, but I think it should be secure(r) by default.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to