Bug#313085: No permissions checking of dchroot.conf

2005-06-11 Thread Steve Langasek
severity 313085 wishlist thanks On Sat, Jun 11, 2005 at 08:16:03PM +0100, Roger Leigh wrote: > Package: dchroot > Version: 0.11 > Severity: grave > Tags: security > Justification: user security hole > When reading the configuration file, there is no checking to > make sure that > 1) The file is

Processed: Re: Bug#313085: No permissions checking of dchroot.conf

2005-06-11 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > severity 313085 wishlist Bug#313085: No permissions checking of dchroot.conf Severity set to `wishlist'. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administra

Bug#313085: No permissions checking of dchroot.conf

2005-06-11 Thread Roger Leigh
Package: dchroot Version: 0.11 Severity: grave Tags: security Justification: user security hole When reading the configuration file, there is no checking to make sure that 1) The file is owned by root 2) The file is not writable by other If the ownership or permissions are wrong, a normal user c