Your message dated Wed, 06 Jan 2010 13:18:01 +0000
with message-id <[email protected]>
and subject line Bug#552611: fixed in watchdog 5.7-1
has caused the Debian Bug report #552611,
regarding watchdog: file handle is inherited by sendmail
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
552611: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552611
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: watchdog
Version: 5.4-10
Severity: normal
The following patch sets the socket handle for raw socket access to close on
exec. This means that when popen is used to spawn sendmail the sendmail
process won't inherit the file handle.
I don't know if this is the only file handle that might be inappropriately
inherited, but it's the only one that appeared in my tests.
diff -ru watchdog-5.4.bak/src/watchdog.c watchdog-5.4/src/watchdog.c
--- watchdog-5.4.bak/src/watchdog.c 2007-08-17 19:24:54.000000000 +1000
+++ watchdog-5.4/src/watchdog.c 2009-10-27 23:10:03.000000000 +1100
@@ -555,7 +555,8 @@
(void) fprintf(stderr, "%s: unknown protocol icmp.\n",
progname);
exit(1);
}
- if ((net->sock_fp = socket(AF_INET, SOCK_RAW, proto->p_proto)) < 0)
{
+ if ((net->sock_fp = socket(AF_INET, SOCK_RAW, proto->p_proto)) < 0
+ || fcntl(net->sock_fp, F_SETFD, 1)) {
perror(progname);
exit(1);
}
--- End Message ---
--- Begin Message ---
Source: watchdog
Source-Version: 5.7-1
We believe that the bug you reported is fixed in the latest version of
watchdog, which is due to be installed in the Debian FTP archive:
watchdog_5.7-1.diff.gz
to main/w/watchdog/watchdog_5.7-1.diff.gz
watchdog_5.7-1.dsc
to main/w/watchdog/watchdog_5.7-1.dsc
watchdog_5.7-1_amd64.deb
to main/w/watchdog/watchdog_5.7-1_amd64.deb
watchdog_5.7.orig.tar.gz
to main/w/watchdog/watchdog_5.7.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Meskes <[email protected]> (supplier of updated watchdog package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 06 Jan 2010 13:33:25 +0100
Source: watchdog
Binary: watchdog
Architecture: source amd64
Version: 5.7-1
Distribution: unstable
Urgency: low
Maintainer: Michael Meskes <[email protected]>
Changed-By: Michael Meskes <[email protected]>
Description:
watchdog - A software watchdog
Closes: 552611 563798
Changes:
watchdog (5.7-1) unstable; urgency=low
.
* New upstream version including all the changes from the Debian package and
- Patch by Russell Coker <[email protected]> to set the socket
handle for raw socket access to close on exec. (Closes: #552611)
- Patch by Russell Coker <[email protected]> to give a
better error message if no config file is found. (Closes: #563798)
Checksums-Sha1:
4d42935eed7a24dd3f3cec2c819c0ea6b2311723 988 watchdog_5.7-1.dsc
91cffa39a54733118e3de65eaeb431b027f68878 193550 watchdog_5.7.orig.tar.gz
b4ae1a3c7f56b09c9f67f94f3380da61f54c2311 20 watchdog_5.7-1.diff.gz
87ff8b80fc9a617df6edfde8d285d42a78afe484 79076 watchdog_5.7-1_amd64.deb
Checksums-Sha256:
e3c8a54281286519da7dbc94cfcb31314efd652e2432c5f9a4097c5e0443eeae 988
watchdog_5.7-1.dsc
a5f77fc276e62acac6871f38577754120fa3d93f8cd6025c765ab4b709239fd7 193550
watchdog_5.7.orig.tar.gz
527a9f61e40efc362e6c92c51d99c9db4e7887521a82d4da38ac609088ac619b 20
watchdog_5.7-1.diff.gz
bf4234dcd102d00dd55200208f77a965640de98195b80980286525d371521af1 79076
watchdog_5.7-1_amd64.deb
Files:
033c98e794ea8bbb9990d412dfb929af 988 admin extra watchdog_5.7-1.dsc
31766450ecfc9aff70fe966c0b9df06d 193550 admin extra watchdog_5.7.orig.tar.gz
beee709df204507c20366018a3361923 20 admin extra watchdog_5.7-1.diff.gz
2b60bb19885df97320f5ca472085d825 79076 admin extra watchdog_5.7-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iD8DBQFLRIu3VkEm8inxm9ERArpEAJ4/lIBn/VURwPdz/vzr/qWGU9Ys1wCbBQw8
5HsF503DtyLWR0aXcxEa1Ms=
=HxIr
-----END PGP SIGNATURE-----
--- End Message ---
