Comment 5 for bug 7004

Message-Id: <email address hidden>
Date: Sun, 11 Jul 2004 22:10:02 +0200
From: David Pettersson <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: libpisock8: System serial device permissions overridden

Package: libpisock8
Version: 0.11.8-10
Severity: normal
Tags: security

Hi,

The libpisock8 package places a libpisock8 file in the /etc/devfs/conf.d
directory, which explicitly overrides the system permissions for the
first serial port, setting /dev/ttyS0 to world read/writable.

This is a nice convenience feature for the average user, but it also
allows all users (even those not in the dialout group) to access the
serial port.

I am unsure how to solve this. However, please let me know if I can
assist in any way.

Sincerely,
--
David Pettersson

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7
Locale: LANG=sv_SE, LC_CTYPE=sv_SE

Versions of packages libpisock8 depends on:
ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an
ii libncurses5 5.4-4 Shared libraries for terminal hand
ii libreadline4 4.3-11 GNU readline and history libraries

-- no debconf information