Package: bacula-common
Version: 5.0.2-2
Severity: normal
The default configuration files (bacula-dir.conf, bacula-fd.conf,
bacula-sd.conf located in /usr/share/bacula-common/defconfig/ in the
package, /etc/bacula after installation) ship with hard-coded passwords.
This is a security issue in that anyone using the the default passwords
(especially on an Internet-exposed system) is at risk of attack since
the defaults are essentially public knowledge.
I suggest that the package install process generates random passwords
and fills them into the appropriate places in the config files.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages bacula-common depends on:
ii adduser 3.112 add and remove users and groups
ii debconf [debconf-2.0] 1.5.36 Debian configuration
management sy
ii libc6 2.11.2-6+squeeze1 Embedded GNU C Library:
Shared lib
ii libgcc1 1:4.4.5-4 GCC support library
ii libpython2.6 2.6.6-6 Shared Python runtime
library (ver
ii libssl0.9.8 0.9.8o-2 SSL shared libraries
ii libstdc++6 4.4.5-4 The GNU Standard C++ Library v3
ii libwrap0 7.6.q-19 Wietse Venema's TCP
wrappers libra
bacula-common recommends no packages.
Versions of packages bacula-common suggests:
pn bacula-doc <none> (no description available)
-- no debconf information
<<--------------------------------------------------------------------------------->>
This E-Mail message has been scanned for viruses and content
and cleared by >>smaRTmail<< from Renegade Technologies
<<--------------------------------------------------------------------------------->>
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
