New sec advisory from bhodisoft. Problem with default directory ownership and path settings on Debian 3. Requires a local ‘staff’ account to be an issue, but this is bad practice.