Your message dated Mon, 01 Mar 2010 12:09:32 +0100
with message-id <[email protected]>
and subject line Re: Bug#569949: ipsec-tools: does not flush SAD and SPD on 
removal, or purge))
has caused the Debian Bug report #569949,
regarding ipsec-tools: does not flush SAD and SPD on removal or purge
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
569949: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569949
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ipsec-tools
Version: 1:0.7.1-1.3+lenny2
Severity: normal

Hi,

On removal and purging of ipsec-tools package the IPsec SA/SP database does not 
get
flushed. This leaves the system possibly in a state with active IPsec
SPD entries, without the tools to manage the SP database.

Currently the only solution in this case is either to reboot or to
reinstall the package, run setkey or init-script and remove package
again.

While I think it's a good idea to *not* run setkey init-script after 
installation, I
do not see a good reason, why setkey init-script does not get invoked on 
removal.

I think an invokation of 

    /etc/init.d/setkey stop
    
in a prerm script would be a good idea.

Jan

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686-bigmem (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages ipsec-tools depends on:
ii  libc6           2.7-18lenny2             GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libkrb53        1.6.dfsg.4~beta1-5lenny2 MIT Kerberos runtime libraries
ii  libpam0g        1.0.1-5+lenny1           Pluggable Authentication Modules l
ii  libssl0.9.8     0.9.8g-15+lenny6         SSL shared libraries

ipsec-tools recommends no packages.

ipsec-tools suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Am 01.03.2010 12:01, Jan Sievers schrieb:
> Hi Stefan,
> 
> the version
> 
>       1:0.7.3-3
> 
> works fine for me.
> 
> Thanks for fixing it.
> Jan
> 


-- 
Stefan Bauer -----------------------------------------
PGP: E80A 50D5 2D46 341C A887 F05D 5C81 5858 DCEF 8C34
-------- plzk.de - Linux - because it works ----------


--- End Message ---

Reply via email to