Branches for Intrepid

Author: Kees Cook
Revision Date: 2010-01-25 17:11:56 UTC

* SECURITY UPDATE: local attacker can trick fuse into unmounting a
  filesystem from the wrong location.
  - debian/patches/200-fix_mount_symlink_handling: backported upstream
    fixes.
  - CVE-2009-3297

Author: Kees Cook
Revision Date: 2010-01-25 17:11:56 UTC

* SECURITY UPDATE: local attacker can trick fuse into unmounting a
  filesystem from the wrong location.
  - debian/patches/200-fix_mount_symlink_handling: backported upstream
    fixes.
  - CVE-2009-3297

Author: Martin Pitt
Revision Date: 2008-09-25 17:47:10 UTC

* debian/fuse-utils.postinst: Install /bin/fusermount as world executable.
  it already bails out correctly if the user does not have access to
  /dev/fuse; no reason to control access to it in two different places (and
  the permissions of the binary can't be changed in a flexible way).
* Add debian/10-fuse-permissions.fdi: Enable hal's dynamic ACL management
  for /dev/fuse, so that local foreground consoles will have access to it.
  Install it in debian/fuse-utils.install.
* Drop debian/fuse-utils-needs-users-added-to-fuse-group.update-notifier and
  its installation in the postinst, it's not really relevant any more.
* See intrepid-device-permissions spec for details.