Your message dated Wed, 14 Jan 2015 21:19:12 +0000
with message-id <[email protected]>
and subject line Bug#775076: fixed in autopkgtest 3.6jessie1
has caused the Debian Bug report #775076,
regarding adt-setup-vm: sets force-unsafe-io for host dpkg, not guest
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
775076: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775076
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: autopkgtest
Version: 3.9
Severity: serious
Justification: Unwittingly sets dpkg force-unsafe-io on host
Tags: patch

Hi,

adt-setup-vm creates /etc/dpkg/dpkg.cfg.d/autopkgtest on the host,
instead of in the guest, because the path is missing the $root prefix
pointing to the directory where the guest's root is mounted.

This is very unfortunate, as that file sets force-unsafe-io for dpkg,
so this puts the host at risk to data loss.

Regards,
Christian
>From c8e5aac84d1de20028e85ec236a4a998938bd361 Mon Sep 17 00:00:00 2001
From: Christian Kastner <[email protected]>
Date: Sun, 11 Jan 2015 01:28:36 +0100
Subject: adt-setup-vm: Modify guest's dpkg config, not host's

Add the missing $root prefix (the path to the directory where the guest's root
is mounted) when writing /etc/dpkg/dpkg.conf.d/autopkgtest, otherwise the
host's configuration is modified instead. As force-unsafe-io is being set, this
is very dangerous.
---
 tools/adt-setup-vm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/adt-setup-vm b/tools/adt-setup-vm
index cb0c9bb..b2f83d2 100755
--- a/tools/adt-setup-vm
+++ b/tools/adt-setup-vm
@@ -80,7 +80,7 @@ fi
 
 # go-faster apt/dpkg
 echo "Acquire::Languages \"none\";" > "$root"/etc/apt/apt.conf.d/90nolanguages
-echo 'force-unsafe-io' > /etc/dpkg/dpkg.cfg.d/autopkgtest
+echo 'force-unsafe-io' > "$root"/etc/dpkg/dpkg.cfg.d/autopkgtest
 
 # auto-detect apt-cacher-ng
 if [ -z "${ADT_APT_PROXY:-}" ]; then
-- 
2.1.4


--- End Message ---
--- Begin Message ---
Source: autopkgtest
Source-Version: 3.6jessie1

We believe that the bug you reported is fixed in the latest version of
autopkgtest, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Martin Pitt <[email protected]> (supplier of updated autopkgtest package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 14 Jan 2015 20:34:34 +0100
Source: autopkgtest
Binary: autopkgtest
Architecture: source all
Version: 3.6jessie1
Distribution: jessie
Urgency: medium
Maintainer: Autopkgtest team <[email protected]>
Changed-By: Martin Pitt <[email protected]>
Description:
 autopkgtest - automatic as-installed testing for Debian packages
Closes: 775076
Changes:
 autopkgtest (3.6jessie1) testing; urgency=medium
 .
   [ Christian Kastner ]
   * adt-setup-vm: Modify guest's dpkg config for enabling force-unsafe-io, not
     host's, when a root directory is specified as argument. (Closes: #775076)
   * Clean up /etc/dpkg/dpkg.cfg.d/autopkgtest on upgrades if its contents are
     just "force-unsafe-io", indicating that this file was generated by the
     above bug.
 .
   [ Martin Pitt ]
   * adt-setup-vm: Check guest's /etc/network/interfaces for existing eth0
     instead of host's, when specifying a directory argument. (Spotted as a
     side issue in #775076)
Checksums-Sha1:
 cda27365446ac95a287a08098795a835bbac5b1f 1779 autopkgtest_3.6jessie1.dsc
 3ddd5a0f2d04db2a7b1f6b201421aa443ac2a371 151640 autopkgtest_3.6jessie1.tar.gz
 79beae2d17699fc1b6f65bcade476009e61daa6a 132330 autopkgtest_3.6jessie1_all.deb
Checksums-Sha256:
 99f1dc8a06fe09f48783f3bfcbc789633c90150d713775052fe24e699e82ca85 1779 
autopkgtest_3.6jessie1.dsc
 82d123acc36d98de4ebec13d4121b87dce65db60950053893127dbe3358626cc 151640 
autopkgtest_3.6jessie1.tar.gz
 916f2984d22cf6dcab5034368e7d4ae3caee4dd04d0b78ad165a330722267dd9 132330 
autopkgtest_3.6jessie1_all.deb
Files:
 0ecddd399320da8c51e988c5c0120c9c 1779 devel optional autopkgtest_3.6jessie1.dsc
 ebb321e565fdb12bf20b421b3e42cd33 151640 devel optional 
autopkgtest_3.6jessie1.tar.gz
 7cf1a00a9e50df784411a06ccce894b8 132330 devel optional 
autopkgtest_3.6jessie1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=/h/f
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to