Gert Doering wrote:
>
> * voice/ has support for 16 bit linear audio on V.253 modems
A semicolon is missing in voice/libvoice/V253modem.c line 252:
*speed=8000 /* Default RATE is 8000 but set it anyway */
I recommend to drop this line, because without it, the sampling rate is
adjustable by the config file.
> Security fixes / concept changes:
>
> * it's now possible to run faxrunq/faxrunqd (and thus sendfax) as
> non-root user
>
> * fax spool directories are no longer world-writeable, access is done
> via a suid helper program (suid to a special user ID, "fax")
I guess the user fax should be in group uucp (for accessing the modem)
Now I start faxrunqd with this line in /etc/inittab:
f1:234:respawn:/bin/su fax -c "/usr/local/sbin/faxrunqd ttyS0"
> Distribution vendors:
>
> - I strongly urge you to upgrade to 1.1.29 - older versions are NOT safe
> if there are malicious users on the system and faxrunq/faxrunqd are in
> use.
>
> - The fax queue handling (faxspool, faxq-helper) needs a new user ID
> now ("fax") which MUST own the fax queue directories and SHOULD NOT
> own anything else. The user ID is configured in the Makefile.
>
> - faxrunq/faxrunqd can run as user "fax", but in that case the user
> needs access to the modem devices (via his primary group id).
User fax needs to have read access to faxrunq.config, policy.config and
sendfax.config
>
> Watch out for log file access permissions if this is used!
>
> If anything is unclear, *please* talk to me before rolling out updated
> packages that might break things in funny ways.
BTW: Please check if the mgetty/vgetty package description needs to be
updated.
(One Linux distributor announces mgetty as a fax programm for USR and
USRobotics modems and ELSA modems aren't mentioned at all. Grmbl..)
Juergen