Package: os-prober Version: 1.77 Followup-For: Bug #592834 Dear Maintainer,
* What led up to the situation? This message still appears in stable upgrades. * What exactly did you do (or not do) that was effective (or ineffective)? sudo apt full-upgrade * What was the outcome of this action? As a sysadmin one should investigate these warnings to insure you have taken all precautions to secure your system. Search BTS you will find this bug report. It es mentioned that the warnings are harmless without a in-depth documentation or rational of why they are harmless. Only the prominence of the author offers comfort. Continued investigation of the references package (vgs > lvm2) offers bug #466138 and bug #639773 as further indication that these messages are keep to be useful for security auditing under certain constraints. Constraints that a sysadmin may hard be pressed to judge correctly. I understand the argument that access to file descriptors to sub processes could cause security issues. I also understand that the parent processes may want to keep file descriptors open across invocations of sub processes. Maybe there should be some common practice to handle closing those descriptors during the invocation of the sub process without burdening the parent process. * What outcome did you expect instead? But IIUC these warnings are targeted at developers and maintainers not at the many more sysadmins which scramble to secure their production systems. If there is nothing that the os-prober developes or maintainers can do, then maybe: a) this bug should be reassigned to lvm2 b) there should be some assessment on whether some mechanism should be introduced to suppress these messages should only be emitted in the "testing" suite, and suppressed once the package is stable. Thank you for considering! -- System Information: Debian Release: 10.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-9-amd64 (SMP w/12 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages os-prober depends on: ii grub-common 2.02+dfsg1-20+deb10u2 ii libc6 2.28-10 os-prober recommends no packages. os-prober suggests no packages. -- no debconf information -- David Ayers - Team Austria Free Software Foundation Europe (FSFE) [] (http://www.fsfe.org) Become a supporter of the FSFE! [][][] (https://fsfe.org/join) Your donation powers our work! || (http://fsfe.org/donate)
signature.asc
Description: This is a digitally signed message part