[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#693243: unblock: ncpfs/2.2.6-9



Control: tags -1 moreinfo

On 2012-11-14 17:29, Bastian Blank wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: unblock
> 
> Please unblock package ncpfs/2.2.6-9. I fixed several bugs that breaks
> it either completely or only the second time it is used.
> 

Hi,

Thanks for looking at this and sorry for the delay for getting back to you.

> Also I removed the SUID-bit from the binaries. The NCP protocol is
> practically dead; Movell pushs the customers to migrate to CIFS with
> Samba. So this code does not get a lot attention and a lot of security
> problems had been fixed in the last uploads. Also a quick review didn't
> made me think this is a good idea anyway. The impact is pretty low, as
> mounting via fstab still works.
> 
> [...]
> 

I am a bit concerned about the suid drop from an upgrade PoV.  I would
expect a NEWS entry or so to inform people of the change just in case
they were relying on the suid.
  Alternatively if the code-base is as dead as you suggest, would we be
better of removing this package from Wheezy (or sid)?

~Niels


Reply to: