Bug#353227: asterisk: Doesn't lock voicemail.conf for update

[John Goerzen]

Package: asterisk
Version: 1:1.2.1.dfsg-3
Severity: normal

We have a problem with Asterisk not locking voicemail.conf for update.

It appears to not protect the file even against itself.  It certainly
doesn't use flock() to protect it against others.

This is a problem for several reasons.  First, of course, people can be
hand-editing the file to add or remove users.  Secondly, automated
programs may be appending data to it for the same purpose.

We've noticed corruption in our file and are almost certain that this is
the culprit.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.15.2
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages asterisk depends on:
ii  adduser                3.63              Add and remove users and groups
ii  asterisk-config        1:1.2.1.dfsg-3    config files for asterisk
ii  asterisk-sounds-main   1:1.2.1.dfsg-3    sound files for asterisk
ii  libasound2             1.0.8-3           ALSA library
ii  libc6                  2.3.2.ds1-22      GNU C Library: Shared libraries an
ii  libcurl3               7.13.2-2sarge4    Multi-protocol file transfer libra
ii  libgsm1                1.0.10-13         Shared libraries for GSM speech co
ii  libidn11               0.5.13-1.0        GNU libidn library, implementation
ii  libncurses5            5.4-4             Shared libraries for terminal hand
ii  libnewt0.51            0.51.6-20         Not Erik's Windowing Toolkit - tex
ii  libpq3                 7.4.7-6sarge1     PostgreSQL C client library
ii  libpri1                1.2.1-2           Primary Rate ISDN specification li
ii  libspeex1              1.1.6-2           The Speex Speech Codec
ii  libssl0.9.7            0.9.7e-3sarge1    SSL shared libraries
ii  unixodbc               2.2.4-11          ODBC tools libraries
ii  zlib1g                 1:1.2.2-4.sarge.2 compression library - runtime

-- no debconf information