Dear Steffen Joeris Based on some code analysis and testing I'm sure the problem is not even present in oldstable - no starter.pid is ever written and the subsys entry gets created with -rw-r--r-- permissions so I would opt for closing this bug and the corresponding security tracker entry as unaffected.
Kind regards Harald Jenny -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org