Bug ID | 1171882 |
---|---|
Summary | mgetty: probably long dead directory /var/spool/fax/outgoing/locks in permissions profiles |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | sbrabec@suse.com |
Reporter | matthias.gerstner@suse.com |
QA Contact | qa-bugs@suse.de |
CC | dmueller@suse.com, security-team@suse.de |
Found By | --- |
Blocker | --- |
The security team is currently sanity checking the profiles in the Base:System/permissions package. In this context we've come across the following entries related to the mgetty package: permissions.paranoid: /var/spool/fax/outgoing/locks fax:trusted 0755 permissions.easy: /var/spool/fax/outgoing/locks fax:root 0755 permissions.secure: /var/spool/fax/outgoing/locks fax:root 0755 This directory doesn't seem to be part of mgetty (sendfax) for a long time any more. Upstream commit bac8e5efeeb19ef5bef44ff1d76b73816218936b seems to have removed this in the year 2002 (upstream git repository is at git://github.greenie.net/mgetty/). If you can confirm this I'd like to remove the entries listed above from all permissions profiles.