Package: speech-dispatcher Version: 0.7.1-6.1 Severity: normal Dear Maintainer,
Tiger 1:3.2.3-10 reports that the speeach-dispatcher user is disabled but still has a valid shell: --- NEW: --WARN-- [pass014w] Login (speech-dispatcher) is disabled, but has a valid shell. --- Looking at my /etc/passwd file, normally disabled accounts have something such as /bin/false as their shell, thus further preventing an attacker from logging into that account. See /usr/lib/tiger/scripts/check_passwd for the location of this check. -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages speech-dispatcher depends on: ii adduser 3.113+nmu3 ii dpkg 1.16.3 ii install-info 4.13a.dfsg.1-10 ii libao4 1.1.0-2 ii libasound2 1.0.25-3 ii libaudio2 1.9.3-5 ii libc6 2.13-33 ii libdotconf1.0 1.0.13-3 ii libespeak1 1.46.02-2 ii libflite1 1.4-release-5 ii libglib2.0-0 2.32.3-1 ii libpulse0 2.0-3 ii libspeechd2 0.7.1-6.1 ii lsb-base 4.1+Debian6 Versions of packages speech-dispatcher recommends: ii pulseaudio 2.0-3 Versions of packages speech-dispatcher suggests: pn libttspico-utils <none> pn speech-dispatcher-doc-cs <none> pn speech-dispatcher-festival <none> -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
