icecast2 config/postinst

Jonas Smedegaard dr at jones.dk
Mon Apr 18 17:53:40 UTC 2011


Hi Robin,

On 11-04-18 at 07:29pm, Robin Gareus wrote:
> I've added config-templates and postinst configuration (passwords, 
> hostname, enable-service) to icecast2.

Nice!


> Attached patch applies to revision baf67ba (currently HEAD) on
>   http://git.debian.org/?p=pkg-multimedia/icecast2.git
> 
> What would be needed to get this into the official icecast2 debian 
> package?

Please open a bugreport against the package and include the patch there.

Also, it seems to me from briefly reading it, that you (briefly) expose 
passwords to all local users by printing it as part of an ed command.  
That is (if correctly read) a security flaw and should be avoided.

One way to avoid it is to export the passwords as environment variables 
and then run a short perl script which uses those same variables.

Like this (from a CipUX routine):

export pw="bla"

perl -i -pe "s/[ \t]*#([ \t]*password[ \t]*=).*/\$1\$ENV{'pw'}/" file


But please, instead of discussing further here, file a bugreport and 
let's continue the discussion there :-)


Regards,

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20110418/6f65ec55/attachment-0001.pgp>


More information about the pkg-multimedia-maintainers mailing list