Bug#391918: apache2.2-common: suexec not installed setuid

[Stephane Chazelas <stephane@artesyncp.com>]

Package: apache2.2-common
Version: 2.2.3-1
Severity: important


suexec is installed by apache2.2-common as:

-rwxr-xr-x 1 root root 10468 2006-10-02 17:19 /usr/lib/apache2/suexec

therefore it cannot perform its job, that is change user
identities. The suexec man page states that suexec must be
installed with owner root and setuid bit set.

More like:

-r-sr-xr-x

chmod a=rx,u+s suexec

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17.11
Locale: LANG=en_GB.ISO-8859-15, LC_CTYPE=en_GB.ISO-8859-15 (charmap=ISO-8859-15)

Versions of packages apache2.2-common depends on:
ii  apache2-utils                 2.2.3-1    utility programs for webservers
ii  libmagic1                     4.17-4     File type determination library us
ii  lsb-base                      3.1-17     Linux Standard Base 3.1 init scrip
ii  mime-support                  3.37-1     MIME files 'mime.types' & 'mailcap
ii  net-tools                     1.60-17    The NET-3 networking toolkit

apache2.2-common recommends no packages.

-- no debconf information