Your message dated Sun, 06 Sep 2026 15:19:58 +0000
with message-id <[email protected]>
and subject line Bug#1146847: fixed in xchpst 0.8.6-1
has caused the Debian Bug report #1146847,
regarding Typo in manpage (cap-bs-* vs. caps-bs-*)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1146847: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1146847
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: xchpst
Version: 0.8.5-1
Severity: normal
Tags: upstream
Hi,
xchpst(8) says:
[...]
--caps-bs-keep capability[,capability...]
Keeps only the listed capabilities in the bounding set.
--caps-bs-drop capability[,capability...]
Drops the listed capabilities from the bounding set. Use only
one of the two options governing the bounding set.
--caps-keep capability[,capability...]
Retain the listed capabilities when dropping to a non-root
user.
--caps-drop capability[,capability...]
Drop the listed capabilities when dropping to a non-root user,
but retain all others.
[...]
While xhcpst --help says:
xchpst-0.8.5-1 (c) Copyright 2024,2025 Andrew Bower <[email protected]>
[...]
--cap-bs-keep CAP[,...] restrict capabilities bounding set
--cap-bs-drop CAP[,...] drop from capabilities bounding set
--caps-keep CAP[,...] keep (only) these capabilities
--caps-drop CAP[,...] drop these capabilities
[...]
(Note --cap-bs-* vs. --caps-bs-*.)
What the program actually accepts matches the output of --help, not the manpage.
Please fix the manpage rather than modifying the program to match it, to avoid
breaking existing scripts.
Thanks!
AndrĂ¡s
-- System Information:
Debian Release: forky/sid
APT prefers stable-security
APT policy: (500, 'stable-security'), (350, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Init: runit (via /run/runit.stopit)
-- no debconf information
--
If you want to know about paranoids, follow them around.
--- End Message ---
--- Begin Message ---
Source: xchpst
Source-Version: 0.8.6-1
Done: Andrew Bower <[email protected]>
We believe that the bug you reported is fixed in the latest version of
xchpst, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andrew Bower <[email protected]> (supplier of updated xchpst package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 06 Sep 2026 15:49:57 +0100
Source: xchpst
Architecture: source
Version: 0.8.6-1
Distribution: unstable
Urgency: medium
Maintainer: Andrew Bower <[email protected]>
Changed-By: Andrew Bower <[email protected]>
Closes: 1146847 1146853
Changes:
xchpst (0.8.6-1) unstable; urgency=medium
.
* New upstream release.
- security: fix ineffective capability bounding set options
(Closes: #1146853) Thanks: Andras Korn
- doc: fix man page typos (Closes: #1146847)
Checksums-Sha1:
bbaed49ca40891db8a4cb25b54af3ad1d13ecbcb 2142 xchpst_0.8.6-1.dsc
f3ae5f402a51384a4c21eb632ea6ec2e444e8602 35248 xchpst_0.8.6.orig.tar.xz
eec89f945bc153c9dc7476417cb79c2d489d928d 10912 xchpst_0.8.6-1.debian.tar.xz
6d5e4b931b3131d4eea34de47d85835c3e2fa806 96976 xchpst_0.8.6-1.git.tar.xz
c3e8922bcd7c1602a565a7e876841d10f377fc9a 17664 xchpst_0.8.6-1_source.buildinfo
Checksums-Sha256:
457c15d7c11656e2276ccd19221b05d2a759faf7715b8cdd5937eb02d29d7a03 2142
xchpst_0.8.6-1.dsc
e7cbb386d72c61e1d66106ee31aca6d769b5c60d848f5947dba08b64b9d48cdd 35248
xchpst_0.8.6.orig.tar.xz
4ec9db13596ac1104998727bc685eca9a07d36a8f01fb6a17d4de468ac0ba82b 10912
xchpst_0.8.6-1.debian.tar.xz
6175c653ec27e659735fb4dffc523144bea6ed68462aa3680f10f8ade40ad137 96976
xchpst_0.8.6-1.git.tar.xz
ed0b628bbecc05d753a46c53ece0d84c6b6571e8adbeb054fd97776474edb322 17664
xchpst_0.8.6-1_source.buildinfo
Files:
bed4c44cf6bdffb512c74d369647221d 2142 admin optional xchpst_0.8.6-1.dsc
04ecac1fe38d2eeb1f185f411a233821 35248 admin optional xchpst_0.8.6.orig.tar.xz
849f83a562d6ee7ae5cdf04561cf7f87 10912 admin optional
xchpst_0.8.6-1.debian.tar.xz
92d1f2eb24fd54849e91ccb8466c59f8 96976 admin None xchpst_0.8.6-1.git.tar.xz
61ac30939d01fd4dab17c814ee30dcbf 17664 admin optional
xchpst_0.8.6-1_source.buildinfo
Git-Tag-Info: tag=394662cb2158e2902d3d60dbb0eb32f8a4bb94ab
fp=30a6192fa2c8e79967706d75baa80ed96f7887e9
Git-Tag-Tagger: Andrew Bower <[email protected]>
-----BEGIN PGP SIGNATURE-----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=ld0n
-----END PGP SIGNATURE-----
pgpXCcPQh60di.pgp
Description: PGP signature
--- End Message ---