Your message dated Sun, 07 Jul 2019 07:39:55 +0000
with message-id <[email protected]>
and subject line Bug#927392: fixed in fwknop 2.6.10-3
has caused the Debian Bug report #927392,
regarding fwknop-server: fwknop service dies when an interface goes down
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
927392: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927392
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fwknop-server
Version: 2.6.10-2
Severity: normal
Tags: patch

To reproduce:

1. connect to network and confirm that fwknopd works
2. suspend laptop
3. resume laptop

At this point, systemctl status fwknop-server.service will show the
following:

  ● fwknop-server.service - Firewall Knock Operator Daemon
     Loaded: loaded (/lib/systemd/system/fwknop-server.service; enabled; vendor 
preset: enabled)
     Active: failed (Result: exit-code) since Wed 2019-04-17 18:02:27 PDT; 19h 
ago
    Process: 3289 ExecStart=/usr/sbin/fwknopd (code=exited, status=0/SUCCESS)
   Main PID: 3306 (code=exited, status=1/FAILURE)
  
  avr 17 18:02:27 hostname fwknopd[3306]: [*] Fatal error from pcap_dispatch: 
The interface went down
  avr 17 18:02:27 hostname systemd[1]: fwknop-server.service: Main process 
exited, code=exited, status=1/FAILURE
  avr 17 18:02:27 hostname systemd[1]: fwknop-server.service: Failed with 
result 'exit-code'.

The attached script can be put in /etc/NetworkManager/dispatcher.d/ to
automatically restart fwknop-server when interfaces go up/down.

Francois

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-4-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_USER, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8), 
LANGUAGE=fr_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fwknop-server depends on:
ii  init-system-helpers  1.56+nmu1
ii  iptables             1.8.2-4
ii  libc6                2.28-8
ii  libfko3              2.6.10-2
ii  libpcap0.8           1.8.1-6
ii  lsb-base             10.2019031300

fwknop-server recommends no packages.

Versions of packages fwknop-server suggests:
ii  fwknop-apparmor-profile  2.6.10-2

-- Configuration Files:
/etc/default/fwknop-server changed:
START_DAEMON="yes"
DAEMON_ARGS=""

-- no debconf information
#!/bin/sh
# Copyright (c) 2019 Thomas Koch <linrunner at gmx.net>, Francois Marier 
<[email protected]> and others.
# This software is licensed under the GPL v2 or later.

save_iface_type () { # save interface type -- $1: interface; $2: type
    # rc: 0=saved/1=error
    [ -d $NETD/$1 ] && { printf '%s\n' "$2" > $RUNDIR/${1}.itype; } 2> /dev/null
    return $?
}

get_iface_type () { # get saved interface type -- $1: interface
    # rc: 0=saved state found/1=not found
    # retval: $itype
    local rc

    itype=$(read_sysf $RUNDIR/${1}.itype); rc=$?
    rm -f $RUNDIR/${1}.itype
    return $rc
}

# Get args
iface="$1"
action="$2"
itype=""


# Quit for invalid interfaces
[ -n "$iface" ] && [ "$iface" != "none" ] || exit 0

# Quit for actions other than "up" and "down"
[ "$action" = "up" ] || [ "$action" = "down" ] || exit 0

#  Quit for virtual interfaces (up action)
if [ "$action" = "up" ] && readlink "$NETD/$iface" | grep -q '/virtual/'; then
    # save type for down action where $NETD/$iface won't be there anymore
    save_iface_type $iface virtual
    exit 0
fi

# Get saved interface type (down action)
if [ "$action" = "down" ]; then
    get_iface_type $iface

    # quit for virtual interfaces
    if [ "$itype" = "virtual" ]; then
        exit 0
    fi
fi

case $action in
    up)
        /bin/systemctl start fwknop-server.service
        ;;

    down)
        /bin/systemctl stop fwknop-server.service
        ;;

esac

exit 0

--- End Message ---
--- Begin Message ---
Source: fwknop
Source-Version: 2.6.10-3

We believe that the bug you reported is fixed in the latest version of
fwknop, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Francois Marier <[email protected]> (supplier of updated fwknop package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Jul 2019 14:34:40 -0700
Source: fwknop
Binary: fwknop-apparmor-profile fwknop-client fwknop-client-dbgsym 
fwknop-server fwknop-server-dbgsym libfko-doc libfko-perl libfko-perl-dbgsym 
libfko-python libfko-python-dbgsym libfko3 libfko3-dbgsym libfko3-dev
Architecture: source all amd64
Version: 2.6.10-3
Distribution: unstable
Urgency: medium
Maintainer: Francois Marier <[email protected]>
Changed-By: Francois Marier <[email protected]>
Description:
 fwknop-apparmor-profile - FireWall KNock OPerator - Apparmor profile
 fwknop-client - FireWall KNock OPerator client side - C version
 fwknop-server - FireWall KNock OPerator server side - C version
 libfko-doc - FireWall KNock OPerator - documentation
 libfko-perl - FireWall KNock OPerator - Perl module
 libfko-python - FireWall KNock OPerator - Python module
 libfko3    - FireWall KNock OPerator - shared library
 libfko3-dev - FireWall KNock OPerator - development library
Closes: 927392
Changes:
 fwknop (2.6.10-3) unstable; urgency=medium
 .
   * Restart fwknop-server on failure (closes: #927392)
   * Make libfko3 and libfko-perl "Multi-Arch: same" (Multiarch hinter)
Checksums-Sha1:
 30fc19a39347da063dee895c228572179a6c3d7d 2835 fwknop_2.6.10-3.dsc
 42b5db40b18f701de6729a0e3541266c3e948f82 16156 fwknop_2.6.10-3.debian.tar.xz
 c39fae014d9c4937157862db4e53861831fa5e03 28184 
fwknop-apparmor-profile_2.6.10-3_all.deb
 498900303b5f53161edb32402213f1c546ee74c6 79480 
fwknop-client-dbgsym_2.6.10-3_amd64.deb
 31eb958062188f9dc7f2dd4fe752e6b586a145fe 75908 fwknop-client_2.6.10-3_amd64.deb
 e8e3a9d147b4b23453fc431719e44e32daf955b5 124964 
fwknop-server-dbgsym_2.6.10-3_amd64.deb
 55a1674ecf4f2927e9a12217028ccb6b4f108e7b 108260 
fwknop-server_2.6.10-3_amd64.deb
 596df98a879934b5103cf4b97d3e1245b4ce3d3a 16430 fwknop_2.6.10-3_amd64.buildinfo
 e9150801d16eb84bc8888dc39b58d72ac6a46c3e 54756 libfko-doc_2.6.10-3_all.deb
 9786ce79876c343582564f1f66930bf1ad4c5664 69244 
libfko-perl-dbgsym_2.6.10-3_amd64.deb
 fbf3499229ee47e42c182974ea9f4cc09e427a42 57180 libfko-perl_2.6.10-3_amd64.deb
 fa0ba656370bfb25e076a825ac646c53f1276d7c 25356 
libfko-python-dbgsym_2.6.10-3_amd64.deb
 3adb6043a90dccd1e5e18a7ed4961eed753bac0d 42928 libfko-python_2.6.10-3_amd64.deb
 536257f408ddb24aa7a18d8b9dccd7fc36f68bb3 105180 
libfko3-dbgsym_2.6.10-3_amd64.deb
 64ef5b534e9310eb775d658aca81adb4f65b537b 97232 libfko3-dev_2.6.10-3_amd64.deb
 2f03e8a5864b45220780196544ff3d7b3f422861 64872 libfko3_2.6.10-3_amd64.deb
Checksums-Sha256:
 2037e281272d032033e6c5ef7c7ccfc178b1fac63c22d0910abbabe21a17b071 2835 
fwknop_2.6.10-3.dsc
 21862087c19b8d5788e3d75f7bfbc118f5746504084fccab67139828c73875c8 16156 
fwknop_2.6.10-3.debian.tar.xz
 3428ee01ed4692817913dc8f196aef18af4601e37344983fe4b3a5551ba16270 28184 
fwknop-apparmor-profile_2.6.10-3_all.deb
 dd644b681a3f4c3ce1cab66989db7c843c8c0bb16fe0561c6706b2e04da0034e 79480 
fwknop-client-dbgsym_2.6.10-3_amd64.deb
 3ae337ea81d2a244a1a55db0e0fdc5a955ad4ced62327a04fe1a5cf2299d2b1a 75908 
fwknop-client_2.6.10-3_amd64.deb
 340688d916009ad1e9d24a1c732f43c075f5f568b416848d7369352e915b908e 124964 
fwknop-server-dbgsym_2.6.10-3_amd64.deb
 ad9b0c710238190816a6b20c5fdea39f718c57eb19cc6b0dea5e38eb424dcdc4 108260 
fwknop-server_2.6.10-3_amd64.deb
 860f20c56db7b694ba333e58c9d1956cdb9d995f322f55306e1638edd25049ee 16430 
fwknop_2.6.10-3_amd64.buildinfo
 bda4eab8fee029e1fa17078e5897960aaa1526cc004e3e8d536453f002b5b903 54756 
libfko-doc_2.6.10-3_all.deb
 afa6139ec8e1f5fbd7c78f0a4f7dd0b53e51c16e25f501f46f166392d55fbaf3 69244 
libfko-perl-dbgsym_2.6.10-3_amd64.deb
 50f85ade39bdf7a758792d5854ff45850ba6a4dc779c41c35a25c30a2be2839d 57180 
libfko-perl_2.6.10-3_amd64.deb
 9e129d9a26c0164889bec77d55a6e576301ffd9f6c8e80106f4c6f8959c70beb 25356 
libfko-python-dbgsym_2.6.10-3_amd64.deb
 e6e88b5e7f50fd120f9f7c14f80d2f16fd6769fab5e0f976d3632a1085ca7d71 42928 
libfko-python_2.6.10-3_amd64.deb
 6e07731a1e871af0b027d78606da2c172b080747cfbacf0dd513c249a92c5678 105180 
libfko3-dbgsym_2.6.10-3_amd64.deb
 c090b4ccda5cd5ef09cbdda0ee27fd4366325fc2f913fa52c57a93cbba69e394 97232 
libfko3-dev_2.6.10-3_amd64.deb
 03a6f2a35c9c6b18532f382d0655b6e87a22c8a33b5f59838e012fb3e862016b 64872 
libfko3_2.6.10-3_amd64.deb
Files:
 9233f7bc4a596bacd4771b737e9458bf 2835 admin optional fwknop_2.6.10-3.dsc
 77a190ae3e223dffabace62892002cb4 16156 admin optional 
fwknop_2.6.10-3.debian.tar.xz
 2f81f894112c7c76270f3718c7bb58e3 28184 admin optional 
fwknop-apparmor-profile_2.6.10-3_all.deb
 49a8059a7c86296b49c31a9a3313fa18 79480 debug optional 
fwknop-client-dbgsym_2.6.10-3_amd64.deb
 85e431420a281cf758ae0e92b8ed935f 75908 admin optional 
fwknop-client_2.6.10-3_amd64.deb
 6a3ae2024aa16b4bae254c6de5a8119e 124964 debug optional 
fwknop-server-dbgsym_2.6.10-3_amd64.deb
 61dab8aab0ece031e5098ec00bb8599d 108260 admin optional 
fwknop-server_2.6.10-3_amd64.deb
 716f1181a1b4b9d491bbc6bb71143c21 16430 admin optional 
fwknop_2.6.10-3_amd64.buildinfo
 696979005357fc63ba0c270f3fe0e04e 54756 doc optional libfko-doc_2.6.10-3_all.deb
 036cc07572475289fa6257be693bfed2 69244 debug optional 
libfko-perl-dbgsym_2.6.10-3_amd64.deb
 0ebb9a2ca33b6c8e27ccb44e3377227f 57180 perl optional 
libfko-perl_2.6.10-3_amd64.deb
 ccc9fa02d92f6b8421c6571cf1a65c99 25356 debug optional 
libfko-python-dbgsym_2.6.10-3_amd64.deb
 60c9a33186ab60364c37d5d5ca9e420f 42928 python optional 
libfko-python_2.6.10-3_amd64.deb
 878199470bc6848d6a2fad563452b3ca 105180 debug optional 
libfko3-dbgsym_2.6.10-3_amd64.deb
 903b5a65a7d630255c2cbc65726f607b 97232 libdevel optional 
libfko3-dev_2.6.10-3_amd64.deb
 446105ca0d78af70b3d944578f174997 64872 libs optional libfko3_2.6.10-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=vG45
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to