[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Essential pacakges



Jason Gunthorpe wrote:

[e2compr]

> This is going to cause me grief, should this be allowed or is this package
> in serious viloation of policy?

It probably is.  e2compr needs a big redesign.  The maintainer was
working on it -- at least he was, 17 nov 1997; I haven't contacted him
since.  (e2compr should really depend on the e2fs packages and use
dpkg-divert on three binaries, rather than replacing them wholesale.)

As it stands, the package still depends on libc5, it has many overlaps
with the new e2fs packages, and all its files are owned by user 1000.
With files like /sbin/e2fsck, that's a pretty big security problem.

I marked the security bug as "critical" yesterday.  That means that
unless there's a new version before the code freeze (or someone
disagrees with my assessment of the bug), e2compr will not be
released.

Richard Braakman


--
E-mail the word "unsubscribe" to debian-devel-request@lists.debian.org
TO UNSUBSCRIBE FROM THIS MAILING LIST. Trouble?  E-mail to listmaster@debian.org .


Reply to: