Your message dated Sat, 23 Jul 2016 15:44:32 +0200
with message-id <[email protected]>
and subject line gitosis has been removed from Debian in 2011
has caused the Debian Bug report #648616,
regarding gitosis: breaks post-update hook during upgrade lenny -> squeeze
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
648616: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648616
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gitosis
Version: 0.2+20090917-11
Severity: important
Tags: security
After upgrading a system from lenny to squeeze the post-update hook is a
dangling symbolic link:
# readlink ~gitosis/repositories/gitosis-admin.git/hooks/post-update
/usr/share/python-support/gitosis/gitosis-0.2-py2.5.egg/gitosis/templates/admin/hooks/post-update
#
And the latter file of course does no longer exist. The bad part about
this is that revoking permission via gitosis.conf does not have any
effect anymore and this goes without any visible warning message in
syslog whatsoever. (This is what makes me add the security tag. If the
security team feels different, I ask them to remove the tag.)
The intended link target seems to be
/usr/share/pyshared/gitosis/templates/admin/hooks/post-update now. Given
that filename has not been that constant in the past, but its contents
have, I would suggest to copy it rather than link it.
Helmut
--- End Message ---
--- Begin Message ---
Version: 0.2+20090917-14+rm
gitosis was last released with Debian 6.0 (squeeze) in
February 2011 and removed from Debian sid/unstable later in 2011 (see
http://bugs.debian.org/641010 for details on the removal). Since
support for squeeze and squeeze-LTS has now ended, I'm closing all the
remaining bugs reported against this package.
Andreas
--- End Message ---
