Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Steve Langasek
On Fri, Mar 11, 2005 at 01:39:28PM +0100, Santiago Vila wrote: > In this report, the submitter complains about /usr/local/bin being in > the PATH by default at the same time directories under /usr/local are > root:staff and world-writable. His complain is based on the existence > of become-any-grou

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Bill Allombert
On Fri, Mar 11, 2005 at 06:27:24PM +0100, Santiago Vila wrote: > On Fri, 11 Mar 2005, Bill Allombert wrote: > > > On Fri, Mar 11, 2005 at 01:39:28PM +0100, Santiago Vila wrote: > > > In this report, the submitter complains about /usr/local/bin being in > > > the PATH by default at the same time di

Bug#299007: Agreed

2005-03-11 Thread Matt Zimmerman
I fully support removing this privilege of group staff; it simply makes group staff root-equivalent. -- - mdz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Santiago Vila
On Fri, 11 Mar 2005, Bill Allombert wrote: > On Fri, Mar 11, 2005 at 01:39:28PM +0100, Santiago Vila wrote: > > In this report, the submitter complains about /usr/local/bin being in > > the PATH by default at the same time directories under /usr/local are > > root:staff and world-writable. His com

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Bill Allombert
On Fri, Mar 11, 2005 at 03:26:16PM +0100, Martin Pitt wrote: > Hi! > > I wholeheartedly agree and second this proposal. Also, /home should be > root:root 0755 instead of root:staff 2775; it is only confusing and > actually does not do anything useful. Obviously it does: it allows an administrator

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Marco d'Itri
On Mar 11, Martin Pitt <[EMAIL PROTECTED]> wrote: > I wholeheartedly agree and second this proposal. Also, /home should be > root:root 0755 instead of root:staff 2775; it is only confusing and > actually does not do anything useful. Agreed. -- ciao, Marco signature.asc Description: Digital sig

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Bill Allombert
On Fri, Mar 11, 2005 at 01:39:28PM +0100, Santiago Vila wrote: > In this report, the submitter complains about /usr/local/bin being in > the PATH by default at the same time directories under /usr/local are > root:staff and world-writable. His complain is based on the existence > of become-any-grou

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Martin Pitt
Hi! Santiago Vila [2005-03-11 13:39 +0100]: > In this report, the submitter complains about /usr/local/bin being in > the PATH by default at the same time directories under /usr/local are > root:staff and world-writable. His complain is based on the existence > of become-any-group-but-root bugs. >

Re: Menu icons for packages

2005-03-11 Thread Bill Allombert
On Fri, Mar 11, 2005 at 11:45:50AM +, tim hall wrote: > > > OK, the crux of the matter is that I would like to give some guidance on the > inclusion of .pngs as well as .xpms. I can see that it may suffice to quote > menu icon policy verbatim and include any discussion of .desktop & .pn

Bug#299007: base-files: Insecure PATH

2005-03-11 Thread Santiago Vila
In this report, the submitter complains about /usr/local/bin being in the PATH by default at the same time directories under /usr/local are root:staff and world-writable. His complain is based on the existence of become-any-group-but-root bugs. If this is a bug at all, I think we should probably d

Re: Menu icons for packages

2005-03-11 Thread tim hall
Last Thursday 10 March 2005 14:26, Bill Allombert was like: > On Thu, Mar 10, 2005 at 01:22:07PM +, tim hall wrote: > > I've been keeping an eye on the situation with regards to icons in menu > > entries for A/DeMuDi - The multimedia CDD. Most of you have read this > > before, I apologise for n

Processed: Re: Bug#299007: base-files: Insecure PATH in /root/.profile

2005-03-11 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > severity 299007 wishlist Bug#299007: base-files: Insecure PATH in /root/.profile Severity set to `wishlist'. > reassign 299007 debian-policy Bug#299007: base-files: Insecure PATH in /root/.profile Bug reassigned from package `base-files' to `debian-pol