Package: speech-dispatcher
Version: 0.7-6
Severity: serious
Tags: patch
Justification: Policy 10.8


Hi,

/etc/logrotate.d/speech-dispatcher is badly written. Some options are 
set outside of blocs so that they apply to all the blocs that are 
subsequently treated : those that are alphabetically sorted after
speech-dispatcher and the wtmp/utmp blocs since they appear after the 
inclusion of /etc/logrotate.d/* in /etc/logrotate.conf.

As for the severity of this bug, I know it is somewhat exagerated since
10.8 do not forbid 'out-of-bloc' options in /etc/logrotate.d files, but 
I think the side effects of this bug are nasty enough to be treated
before squeeze release (if it's still time).

By the way, it would be nice if such an anti-social behaviour would be
forbidden by the policy ;-).

Feel free to lower security if I'm wrong.

TIA

pp

-- System Information:
Debian Release: 6.0
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-openvz-686 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8) (ignored: LC_ALL 
set to fr_FR.utf8)
Shell: /bin/sh linked to /bin/bash

Versions of packages speech-dispatcher depends on:
ii  adduser                 3.112+nmu2       add and remove users and groups
ii  dpkg                    1.15.8.9         Debian package management system
ii  install-info            4.13a.dfsg.1-6   Manage installed documentation in 
ii  libasound2              1.0.23-2.1       shared library for ALSA applicatio
ii  libaudio2               1.9.2-4          Network Audio System - shared libr
ii  libc6                   2.11.2-10        Embedded GNU C Library: Shared lib
ii  libdotconf1.0           1.0.13-3         Configuration file parser library 
ii  libespeak1              1.43.03-2        A multi-lingual software speech sy
ii  libflite1               1.4-release-2    a small run-time speech synthesis 
ii  libglib2.0-0            2.24.2-1         The GLib library of C routines
ii  libpulse0               0.9.21-3         PulseAudio client libraries
ii  libspeechd2             0.7-6            Speech Dispatcher: Shared librarie
ii  lsb-base                3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip

Versions of packages speech-dispatcher recommends:
pn  pulseaudio                    <none>     (no description available)

Versions of packages speech-dispatcher suggests:
pn  speech-dispatcher-doc-cs      <none>     (no description available)
pn  speech-dispatcher-festival    <none>     (no description available)

-- Configuration Files:
/etc/default/speech-dispatcher changed [not included]

-- no debconf information
--- speech-dispatcher.bad       2011-02-01 07:52:06.000000000 +0100
+++ speech-dispatcher.good      2011-02-01 07:53:52.000000000 +0100
@@ -1,10 +1,9 @@
-daily
-compress
-missingok
-sharedscripts
-
 /var/log/speech-dispatcher/speech-dispatcher.log 
/var/log/speech-dispatcher/speech-dispatcher-protocol.log {
   rotate 7
+  daily
+  compress
+  missingok
+  sharedscripts
   postrotate
     /etc/init.d/speech-dispatcher reload >/dev/null
   endscript
@@ -12,6 +11,10 @@
 
 /var/log/speech-dispatcher/debug-epos-generic 
/var/log/speech-dispatcher/debug-festival 
/var/log/speech-dispatcher/debug-flite {
   rotate 2
+  daily
+  compress
+  missingok
+  sharedscripts
   postrotate
     /etc/init.d/speech-dispatcher reload >/dev/null
   endscript

Reply via email to