Your message dated Fri, 15 Jun 2012 15:16:02 +0000
with message-id <[email protected]>
and subject line Bug#658369: fixed in rpcbind 0.2.0-8
has caused the Debian Bug report #658369,
regarding rpcbind: precreating state files makes selinux unhappy
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
658369: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658369
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rpcbind
Version: 0.2.0-7
Severity: normal
Tags: patch
Hi,
The fix for #620800 works around startup warnings by touching the state files
before starting rpcbind. This approach does not agree with SELinux, because
files created outside the daemon do not receive the correct security label.
Multiple solutions exist, like defining a new security domain for the init
script (overkill) or manually calling chcon/restorecon (which hardcodes policy
in the script). But in this case, the simplest solution is to simply not pass
-w unless we know the warm start is actually viable.
Patch attached. Even without -w, rpcbind will still save its state on exit.
Regards,
Arno Schuring
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (900, 'stable'), (300, 'unstable'), (200,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.1.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages rpcbind depends on:
ii initscripts 2.88dsf-18
ii insserv 1.14.0-2.2
ii libc6 2.13-24
ii libtirpc1 0.2.2-5
ii libwrap0 7.6.q-22
ii lsb-base 3.2-28
rpcbind recommends no packages.
rpcbind suggests no packages.
-- no debconf information
--- /etc/init.d/rpcbind 2011-12-10 01:35:16.000000000 +0100
+++ rpcbind 2012-02-02 14:33:40.220222598 +0100
@@ -20,7 +20,7 @@
. /lib/lsb/init-functions
-OPTIONS="-w"
+OPTIONS=
STATEDIR=/run/rpcbind
PIDFILE=/run/rpcbind.pid
@@ -42,13 +42,9 @@
log_end_msg 1
exit 1
fi
- if [ ! -f $STATEDIR/rpcbind.xdr ]
+ if [ -f $STATEDIR/rpcbind.xdr ]
then
- touch $STATEDIR/rpcbind.xdr
- fi
- if [ ! -f $STATEDIR/portmap.xdr ]
- then
- touch $STATEDIR/portmap.xdr
+ WARMSTART=-w
fi
log_begin_msg "Starting rpcbind daemon..."
pid=$( pidofproc /sbin/rpcbind )
@@ -58,7 +54,7 @@
log_end_msg 0
exit 0
fi
- start-stop-daemon --start --quiet --oknodo --exec /sbin/rpcbind -- "$@"
+ start-stop-daemon --start --quiet --oknodo --exec /sbin/rpcbind -- "$WARMSTART" "$@"
pid=$( pidofproc /sbin/rpcbind )
echo -n "$pid" >"$PIDFILE"
# /run/sendsigs.omit.d is created by /etc/init.d/mountkernfs.sh
--- End Message ---
--- Begin Message ---
Source: rpcbind
Source-Version: 0.2.0-8
We believe that the bug you reported is fixed in the latest version of
rpcbind, which is due to be installed in the Debian FTP archive:
rpcbind_0.2.0-8.debian.tar.bz2
to main/r/rpcbind/rpcbind_0.2.0-8.debian.tar.bz2
rpcbind_0.2.0-8.dsc
to main/r/rpcbind/rpcbind_0.2.0-8.dsc
rpcbind_0.2.0-8_mipsel.deb
to main/r/rpcbind/rpcbind_0.2.0-8_mipsel.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anibal Monsalve Salazar <[email protected]> (supplier of updated rpcbind
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 16 Jun 2012 00:02:37 +1000
Source: rpcbind
Binary: rpcbind
Architecture: source mipsel
Version: 0.2.0-8
Distribution: unstable
Urgency: low
Maintainer: Anibal Monsalve Salazar <[email protected]>
Changed-By: Anibal Monsalve Salazar <[email protected]>
Description:
rpcbind - converts RPC program numbers into universal addresses
Closes: 658369
Changes:
rpcbind (0.2.0-8) unstable; urgency=low
.
* Relabel the files if SE Linux is active
Patch by Russell Coker
Closes: #658369
* Enable hardened build flags
* DH compatibility level is 9
* Standards version is 3.9.3
Checksums-Sha1:
b3de38ef022a8eb252e7f1467cb24f608738fbfd 1820 rpcbind_0.2.0-8.dsc
b007b2df8e73bcbde1f57c10010c920ff742fa99 7325 rpcbind_0.2.0-8.debian.tar.bz2
15e930e40cac97545ec5ded62b41decc6af3dfe2 43188 rpcbind_0.2.0-8_mipsel.deb
Checksums-Sha256:
a44f74772df4dd7b9ef8d5bc520e69130cf8296eafdad84967a9d0eca828491b 1820
rpcbind_0.2.0-8.dsc
47e778357f3e46e7f817a014d5a5c282bfe7f1eb22292dd8c1625906198078d9 7325
rpcbind_0.2.0-8.debian.tar.bz2
1c90d0cc149369e1317b0ffa740e76a352b4160cc7c20e13a33363e17c390eba 43188
rpcbind_0.2.0-8_mipsel.deb
Files:
08e4a7074aa82637082c0c9b5c83031a 1820 net standard rpcbind_0.2.0-8.dsc
0d1d57b485e0f4edc41de642b9e3de86 7325 net standard
rpcbind_0.2.0-8.debian.tar.bz2
59b272ab3a9794a821f320184f8f9443 43188 net standard rpcbind_0.2.0-8_mipsel.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=8LAC
-----END PGP SIGNATURE-----
--- End Message ---
