Package: fai-server Version: 3.2.17~lenny1 Severity: minor Line 75 in fai-setup changes the /etc/passwd-line for the specified log-user with explanation that "there's a bug when the encrypted password is !, so change it to *". On the one hand there should be a link or more detailed description for the bug. On the other hand shadow-passwords are default on debian systems. So the line in /etc/passwd never includes a ! in the password field (it's a "x" in this case). This makes the change needless, if the bug doesn't exist for a "x" in the password field, but triggers a message from the security-audit tool tiger:
# Verifying system specific password checks... --WARN-- [pass20w] Login ID fai is not configured to use shadow passwords. I suggest to remove the line or at least check if shadow passwords are enabled and thus the bug doesn't occur. Furthermore give a hint where to find more information about the bug - or simply fix it. ;-) -- System Information: Debian Release: 5.0.4 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages fai-server depends on: ii debootstrap 1.0.10lenny1 Bootstrap a basic Debian system ii fai-client 3.2.17~lenny1 Fully Automatic Installation clien Versions of packages fai-server recommends: ii dhcp3-server 3.1.1-6+lenny4 DHCP server for automatic IP addre ii inetutils-inetd [inet-su 2:1.5.dfsg.1-9 internet super server ii nfs-kernel-server 1:1.1.2-6lenny2 support for NFS kernel server ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh ii openssh-server 1:5.1p1-5 secure shell server, an rshd repla ii syslinux-common 2:3.71+dfsg-5 Kernel loader which uses a FAT, ex ii tftpd-hpa 0.48-2.3 HPA's tftp server Versions of packages fai-server suggests: ii apt-move 4.2.27-1+b5 Maintain Debian packages in a pack ii aptitude 0.4.11.11-1~lenny1 terminal-based package manager pn debmirror <none> (no description available) ii genisoimage 9:1.1.9-1 Creates ISO-9660 CD-ROM filesystem ii grub 0.97-47lenny2 GRand Unified Bootloader (Legacy v pn libproc-daemon-perl <none> (no description available) pn perl-tk <none> (no description available) -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
