Package: src:ensembl Version: 63-1 Severity: serious ensembl.postinst modifies
/usr/share/ensembl/conf/Plugins.pm /usr/share/ensembl/public-plugins/mirror/conf/SiteDefs.pm so these tiles seem to be configuration files and should not be located in /usr. I'm also not sure if the current use of debconf in ensembl.postinst preserves changes to these files as it seems to unconditionally overwrite database access information with values from debconf. Also passwords are passed as command-line arguments in ensembl.postinst which makes them visible in the process list. Ansgar -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
