Your message dated Wed, 21 Sep 2005 14:47:11 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#327901: fixed in postgresql-8.0 8.0.3-16
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 12 Sep 2005 20:46:27 +0000
>From [EMAIL PROTECTED] Mon Sep 12 13:46:27 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mini002.webpack.hosteurope.de [80.237.130.131]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EEvC6-0005xJ-00; Mon, 12 Sep 2005 13:46:26 -0700
Received: by mini002.webpack.hosteurope.de running Exim 4.51 using esmtpsa
(TLSv1:DES-CBC3-SHA:168)
from p54acbea9.dip0.t-ipconnect.de ([84.172.190.169]
helo=timo01.tiwe.homelinux.org)
id 1EEvC4-0004R6-4o; Mon, 12 Sep 2005 22:46:24 +0200
From: Timo =?iso-8859-1?q?Weing=E4rtner?= <[EMAIL PROTECTED]>
To: "Debian Bug Tracking System" <[EMAIL PROTECTED]>
Subject: postgresql-common: Fails after upgrade because of too strict checking
of permissions on SSL key file
Date: Mon, 12 Sep 2005 22:46:14 +0200
User-Agent: KMail/1.8.2
MIME-Version: 1.0
Content-Type: multipart/signed;
boundary="nextPart2383273.Tpv9PSYIfr";
protocol="application/pgp-signature";
micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
--nextPart2383273.Tpv9PSYIfr
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Package: postgresql-common
Version: 25
Severity: grave
Justification: causes non-serious data loss
After upgrade from version 23 postgres-8.0 fails to start with:
=2D--8<---8<---
=46ATAL: unsichere Berechtigungen f=FCr private Schl=FCsseldatei =BB/var/l=
ib/postgresql/8.0/main/server.key=AB
DETAIL: Die Datei muss dem Datenbankbenutzer geh=F6ren und keine Berechtig=
ungen f=FCr =BBGruppe=AB oder =BBAndere=AB haben.
=2D--8<---8<---
I don't want to try it with other locale settings because I don't want
to loose more accounting data.
It sais "isecure permissions" and wants the file to be owned by the
database user an have maximum permissions of 0700.
My permissions are:
=2D--8<---8<---
# file: etc/ssl/private/server.tiwe.homelinux.org_key.pem
# owner: root
# group: root
user::r--
user:postgres:r--
user:Debian-exim:r--
group::---
mask::r--
other::---
=2D--8<---8<---
(The key file is made immutable to keep cupsys from changing
permissions)
If postgres thinks the file is insecure it could issue a warning, but
refusing to start is NOT OK.
=46inally I AM THE ADMIN and I know what I'm doing. I don't need any
program pretending to be more clever than me.
There was no warning to check permissions before upgrading, so I lost
accounting data (not serious, it costs me no money).
Timo Weing=E4rtner
=2D- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (900, 'testing'), (800, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.2-swsusp2
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=3DISO-8859-15)
Versions of packages postgresql-common depends on:
ii adduser 3.67 Add and remove users and groups
Versions of packages postgresql-common recommends:
ii openssl 0.9.7e-3 Secure Socket Layer (SSL) bina=
ry a
=2D- no debconf information
--nextPart2383273.Tpv9PSYIfr
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iQEcBAABAgAGBQJDJekdAAoJEEn74FOC+06t0aYH/RXG5NixPnZuRjsXWLDPIObS
udBROTgFr87009g1oV4SW9MWYX/Xi2bhhruUBDdheRgvq4jbxfSVptp7pgQjA2Bb
m55qG9roneV5C6nDcPCz93SJJftikOSptkxXcK7LWl2i55KWauFlwpjAdOzjTVHQ
CRzdq2JUmQ1lH5iBd0N3ULXdG16jMjhZs661RI2b3ZvOU3GVJ1HlGEw1BsLjl8+e
SrB+rmf/tH57OTAkvx2EtxlORFIYXXQcpeIi6Uy5/5Wd9S8Dd3wyte8SJO3WO/vf
QHwDEKv6xQhsxB4FENsUi4O78Pb03vxpjpAzEaukpsXf+LhzMCeoiAqJquet5IE=
=fOEE
-----END PGP SIGNATURE-----
--nextPart2383273.Tpv9PSYIfr--
---------------------------------------
Received: (at 327901-close) by bugs.debian.org; 21 Sep 2005 21:48:15 +0000
>From [EMAIL PROTECTED] Wed Sep 21 14:48:15 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1EICQp-0008OF-00; Wed, 21 Sep 2005 14:47:11 -0700
From: Martin Pitt <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#327901: fixed in postgresql-8.0 8.0.3-16
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Wed, 21 Sep 2005 14:47:11 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 2
Source: postgresql-8.0
Source-Version: 8.0.3-16
We believe that the bug you reported is fixed in the latest version of
postgresql-8.0, which is due to be installed in the Debian FTP archive:
libecpg-compat2_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libecpg-compat2_8.0.3-16_i386.deb
libecpg-dev_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libecpg-dev_8.0.3-16_i386.deb
libecpg5_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libecpg5_8.0.3-16_i386.deb
libpgtypes2_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libpgtypes2_8.0.3-16_i386.deb
libpq-dev_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libpq-dev_8.0.3-16_i386.deb
libpq4_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/libpq4_8.0.3-16_i386.deb
postgresql-8.0_8.0.3-16.diff.gz
to pool/main/p/postgresql-8.0/postgresql-8.0_8.0.3-16.diff.gz
postgresql-8.0_8.0.3-16.dsc
to pool/main/p/postgresql-8.0/postgresql-8.0_8.0.3-16.dsc
postgresql-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-8.0_8.0.3-16_i386.deb
postgresql-client-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-client-8.0_8.0.3-16_i386.deb
postgresql-contrib-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-contrib-8.0_8.0.3-16_i386.deb
postgresql-doc-8.0_8.0.3-16_all.deb
to pool/main/p/postgresql-8.0/postgresql-doc-8.0_8.0.3-16_all.deb
postgresql-plperl-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-plperl-8.0_8.0.3-16_i386.deb
postgresql-plpython-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-plpython-8.0_8.0.3-16_i386.deb
postgresql-pltcl-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-pltcl-8.0_8.0.3-16_i386.deb
postgresql-server-dev-8.0_8.0.3-16_i386.deb
to pool/main/p/postgresql-8.0/postgresql-server-dev-8.0_8.0.3-16_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Martin Pitt <[EMAIL PROTECTED]> (supplier of updated postgresql-8.0 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 21 Sep 2005 23:20:27 +0200
Source: postgresql-8.0
Binary: postgresql-client-8.0 postgresql-plperl-8.0 postgresql-doc-8.0
postgresql-pltcl-8.0 libpgtypes2 libpq-dev libpq4 postgresql-plpython-8.0
postgresql-contrib-8.0 postgresql-server-dev-8.0 libecpg5 libecpg-compat2
postgresql-8.0 libecpg-dev
Architecture: source i386 all
Version: 8.0.3-16
Distribution: unstable
Urgency: medium
Maintainer: Martin Pitt <[EMAIL PROTECTED]>
Changed-By: Martin Pitt <[EMAIL PROTECTED]>
Description:
libecpg-compat2 - older version of run-time library for ECPG programs
libecpg-dev - development files for ECPG (Embedded PostgreSQL for C)
libecpg5 - run-time library for ECPG programs
libpgtypes2 - shared library libpgtypes for PostgreSQL 8.0
libpq-dev - header files for libpq4 (PostgreSQL library)
libpq4 - PostgreSQL C client library
postgresql-8.0 - object-relational SQL database, version 8.0 server
postgresql-client-8.0 - front-end programs for PostgreSQL 8.0
postgresql-contrib-8.0 - additional facilities for PostgreSQL
postgresql-doc-8.0 - documentation for the PostgreSQL database management
system
postgresql-plperl-8.0 - PL/Perl procedural language for PostgreSQL 8.0
postgresql-plpython-8.0 - PL/Python procedural language for PostgreSQL 8.0
postgresql-pltcl-8.0 - PL/TCL procedural language for PostgreSQL 8.0
postgresql-server-dev-8.0 - development files for PostgreSQL 8.0 server-side
programming
Closes: 327380 327901
Changes:
postgresql-8.0 (8.0.3-16) unstable; urgency=medium
.
* Urgency medium since this fixes two release critical bugs in testing.
* libpq-dev: Add missing dependency libssl-dev. Closes: #327380
* Add debian/patches/07-relax-sslkey-permscheck.patch:
- Relax security check on private SSL key file: The file is also
considered safe if it has owner and/or group "root", and if it is
group-readable (unless the group is something other than root or the
database owner group).
- Closes: #327901
* Build with gcc 3.3 on ia64, hppa, mips, mipsel, and sparc. Building with
gcc 4.0 causes bus errors. See bug #329197.
Files:
c8036b954325e2d214ff7f66f036de8c 1136 misc optional postgresql-8.0_8.0.3-16.dsc
5a7e4787e9d14f782084589c14acaf4a 21758 misc optional
postgresql-8.0_8.0.3-16.diff.gz
65752ed209d13460ae8b9d8dea3f9817 1266484 doc optional
postgresql-doc-8.0_8.0.3-16_all.deb
46a0ec666801e9f0f2d14a1c6103262f 3974972 misc optional
postgresql-8.0_8.0.3-16_i386.deb
41c8b262ec6bba6bfda157329ba11d74 1159736 misc optional
postgresql-client-8.0_8.0.3-16_i386.deb
7334c5281ab9e9e3b0553c638330a1bb 161318 libdevel optional
libpq-dev_8.0.3-16_i386.deb
b2179a6338e1bc8f6d078ebb56cd6d99 429488 libdevel optional
postgresql-server-dev-8.0_8.0.3-16_i386.deb
04d7749bcb1ced312b4cdcbfab028abd 118842 libs optional libpq4_8.0.3-16_i386.deb
8a244d67f93575a08a37c09a47718eb7 33810 libs optional libecpg5_8.0.3-16_i386.deb
7af8a5642e729ff230ad2d38dd951c84 194230 libdevel optional
libecpg-dev_8.0.3-16_i386.deb
225f05c43fc37ab785e3e6b00be8c01b 15648 libs optional
libecpg-compat2_8.0.3-16_i386.deb
a06201a04fd46eb0bdaf030fe0187ccc 37246 libs optional
libpgtypes2_8.0.3-16_i386.deb
77a1cadc1931b4a78ba84c5b373aeb51 494306 misc optional
postgresql-contrib-8.0_8.0.3-16_i386.deb
92c4e3f97586485048321eda94b158a9 29086 misc optional
postgresql-plperl-8.0_8.0.3-16_i386.deb
f9c5463991ec11aef1efc361a59459f8 24786 misc optional
postgresql-plpython-8.0_8.0.3-16_i386.deb
0d4dec54f496ce01466312f4ba35fdf3 26342 misc optional
postgresql-pltcl-8.0_8.0.3-16_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFDMdG+DecnbV4Fd/IRArqAAKCltlztFF+Ic219GTJFOYlEI0AeIACg06Og
oP69bo/qMorIVsnCtupr+uc=
=7hVG
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
