Package: ntfs-3g Version: 1:2016.2.22AR.1-4 Severity: important Dear Maintainer,
/bin/ntfs-3g is SUID and can be run by any users. Please remove the 'x' bit for other users, and use group 'x' permissions to limit users. A suggestion: Add a ntfs group, and change group of this file to ntfs. Change permission of this file to 4754. Thanks -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages ntfs-3g depends on: ii fuse 2.9.7-1 ii libc6 2.24-9 ii libgcrypt20 1.7.6-1 ii libgnutls30 3.5.8-3 ii libgpg-error0 1.26-2 ii libntfs-3g871 1:2016.2.22AR.1-4 ntfs-3g recommends no packages. ntfs-3g suggests no packages. -- no debconf information
