Your message dated Mon, 15 Mar 2010 07:04:29 +0100
with message-id <4b9dcded.3060...@debian.org>
and subject line Re: live-initramfs: live-media=removable does not work as
advertised,version graph
has caused the Debian Bug report #568750,
regarding live-initramfs: live-media=removable does not work as advertised
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
568750: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=568750
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: live-initramfs
Version: 1.173.1-1
Severity: normal
Tags: security, patch
Hi,
The manpage section about the live-media= boot parameter states
that
the keyword 'removable' can be used to limit the search of
acceptable live media to removable type only.
The *only* part of the specification is pretty important when some
high degree of trust has to be put into a Live system: booting another
Live system than the one you think, without being told, can lead to
severe problems... especially for Live systems such as amnesia[1],
that aim at offering some privacy guarantees to their users. This is
why I set the security tag to this bug, which might be disputable.
The bugs/live-media branch of amnesia's Git repository[2] (Gitweb [3])
has a commit (5e8a2f10610d35fc40b859e8f15a9cd6f01827b9) that fixes
this issue, by actually implementing the documented behaviour.
So... please pull :)
[1] https://amnesia.boum.org/
[2] git://git.immerda.ch/amnesia_live-initramfs.git
[3] http://git.immerda.ch/?p=amnesia_live-initramfs.git;a=summary
Bye,
--
intrigeri <intrig...@boum.org>
| GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
| OTR fingerprint @
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
| The impossible just takes a bit longer.
--- End Message ---
--- Begin Message ---
Version: 1.173.2-1
--
Address: Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email: daniel.baum...@panthera-systems.net
Internet: http://people.panthera-systems.net/~daniel-baumann/
--- End Message ---
