Hi Julien,
On Mon, 2011-07-25 at 18:51 +0200, Julien BLACHE wrote:
> mirsal wrote:
> > * mt-daapd-635297-debconf.patch asks the user for an admin password.
> > * mt-daapd-635297-no-startup.patch disables the automatic startup.
>
> NAK on both.
Thanks for your feedback.
W
password using debconf (Closes: #635297)
++ debian/rules: Call dh_installdebconf
++ debian/config: Added; prompt for an admin password
++ debian/templates: Added;
++ debian/postinst: write the admin password to /etc/mt-daapd.conf
+
+ -- Mirsal Ennaime Mon, 25 Jul 2011 00:30:50 +0200
Package: mt-daapd
Version: 0.9~r1696.dfsg-16
Severity: critical
Tags: security
The /etc/mt-daapd.conf configuration file shipped with the
mt-daapd package contains a well-known default admin password
and the service starts up automatically after installation,
thus allowing potentially unwanted acc
3 matches
Mail list logo