Bug#483756: insist ssh-vulnkey -a be run by the administrator upon upgrade
Package: openssh-client
Version: 1:4.7p1-12
Severity: wishlist
File: /usr/bin/ssh-vulnkey
X-debbugs-cc: suresh@hserus.net
Upon the next upgrade of this package, a screen should greet the
administrator asking him if we shall run ssh-vulnkey -a right now, or
will he remember to run it later [yes|no]...
Why? Because the average administrator of ones personal machine does
not know that there are things on his machine that are bad, even if he
heard there is some SSL crisis and updated the packages in response.
Also please emit a message about what action one should take, or tell
them to see the man page, when bad things are found.
Reply to: