Package: openssl-blacklist
Version: 0.3
Severity: serious
Justification: Policy 9.1.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Please move openssl-vulnkey from /usr/sbin to /usr/bin.

The FHS [0] says:

>  usr/sbin : Non-essential standard system binaries
>
>  Purpose : This directory contains any non-essential binaries used
>    exclusively by the system administrator.

Since openssl-vulnkey can (and should) be used to scan for
vulnerabilities from non-privileged accounts, it doesn't belong in
/usr/sbin.

Policy 9.1.1 says that "all installed files and directories must
comply with the File system Hierarchy Standard (FHS), version 2.3".

Thanks for providing openssl-blacklist for debian!

Regards,

       --dkg

- -- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openssl-blacklist depends on:
ii  openssl                       0.9.8g-10  Secure Socket Layer (SSL) binary a
ii  python                        2.5.2-1    An interactive high-level object-o

openssl-blacklist recommends no packages.

- -- no debconf information

[0] 
http://www.pathname.com/fhs/pub/fhs-2.3.html#USRSBINNONESSENTIALSTANDARDSYSTEMBI

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
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=zGAY
-----END PGP SIGNATURE-----



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to