Bug#46857: apt: If source URI contains password, the password is printed on the screen during fetches

["KORN Andras" <korn@chardonnay.math.bme.hu>]

On Thu, Oct 07, 1999 at 01:05:42PM -0500, Adam Heath wrote:

> It is even worse.  sources.list has to be world readable, so that normal users
> can run apt-get source.

Another possible approach would be to make sources.list owned by, say,
root.apt, mode 640, and make apt-get setgid apt.

I'm not sure this would be a good solution.

Andrew

-- 
  Andrew Korn (Korn Andras) <korn@eik.bme.hu>  http://goliat.eik.bme.hu/~korn
    Finger korn@goliat.eik.bme.hu for pgp key.  Homepage is obsolete. QOTD:
                Anything that kills you makes you...well, dead.