Your message dated Sat, 18 Jun 2011 09:02:42 +0000
with message-id <[email protected]>
and subject line Bug#621027: fixed in nfs-utils 1:1.2.3-3
has caused the Debian Bug report #621027,
regarding bashism in /usr/sbin/start-statd
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
621027: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621027
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nfs-common
Version: 1:1.2.3-2
Severity: normal
rpcinfo: can't contact portmapper: rpcinfo: RPC: Authentication error; why =
Client credential too weak
The package bug script /usr/share/bug/nfs-common/script exited with an error
status (return code = 256). Do you still want to file a report? [y|N|q|?]?
reporting nevertheless.
shambhala:~> mount -t nfs -o vers=3 172.21.101.9:/vol/nfstest /mnt/zeit
/bin/sh: Illegal option -p
[...]
shambhala:~> head -1 /usr/sbin/start-statd
#!/bin/sh -p
shambhala:~> ls -l /bin/sh
lrwxrwxrwx 1 root root 4 20. Dez 10:35 /bin/sh -> dash
Without -p the error message does not appear.
-- Package-specific info:
-- rpcinfo --
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (450, 'testing'), (400, 'unstable'), (110, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.38.5-tp42-snapshot-resv-size-dirty (PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.112+nmu2 add and remove users and groups
ii initscripts 2.88dsf-13.5 scripts for initializing and shutt
ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib
ii libcap2 1:2.20-1 support for getting/setting POSIX.
ii libcomerr2 1.41.12-2 common error description library
ii libevent-1.4-2 1.4.13-stable-1 An asynchronous event notification
ii libgssapi-krb5-2 1.9+dfsg-1+b1 MIT Kerberos runtime libraries - k
ii libgssglue1 0.2-2 mechanism-switch gssapi library
ii libk5crypto3 1.9+dfsg-1+b1 MIT Kerberos runtime libraries - C
ii libkrb5-3 1.9+dfsg-1+b1 MIT Kerberos runtime libraries
ii libnfsidmap2 0.24-1 An nfs idmapping library
ii libtirpc1 0.2.1-1 transport-independent RPC library
ii libwrap0 7.6.q-19 Wietse Venema's TCP wrappers libra
ii lsb-base 3.2-27 Linux Standard Base 3.2 init scrip
ii netbase 4.45 Basic TCP/IP networking system
ii rpcbind 0.2.0-6 converts RPC program numbers into
ii ucf 3.0025+nmu2 Update Configuration File: preserv
Versions of packages nfs-common recommends:
ii python 2.6.6-14 interactive high-level object-orie
nfs-common suggests no packages.
-- Configuration Files:
/etc/init.d/nfs-common changed:
DESC="NFS common utilities"
DEFAULTFILE=/etc/default/nfs-common
PREFIX=
NEED_STATD=
NEED_IDMAPD=
NEED_GSSD=
PIPEFS_MOUNTPOINT=/var/lib/nfs/rpc_pipefs
RPCGSSDOPTS=
if [ -f $DEFAULTFILE ]; then
. $DEFAULTFILE
fi
. /lib/lsb/init-functions
[ -x $PREFIX/sbin/rpc.statd ] || exit 0
AUTO_NEED_IDMAPD=no
AUTO_NEED_GSSD=no
if [ -f /etc/fstab ]; then
exec 9<&0 </etc/fstab
while read DEV MTPT FSTYPE OPTS REST
do
case $DEV in
''|\#*)
continue
;;
esac
# FSTYPE "nfs" can be NFSv4 now
#if [ "$FSTYPE" = "nfs4" ]; then
AUTO_NEED_IDMAPD=yes
#fi
case "$OPTS" in
sec=krb5|*,sec=krb5|sec=krb5,*|*,sec=krb5i,*|sec=krb5i|*,sec=krb5i|sec=krb5i,*|*,sec=krb5i,*|sec=krb5p|*,sec=krb5p|sec=krb5p,*|*,sec=krb5p,*)
AUTO_NEED_GSSD=yes
;;
esac
done
exec 0<&9 9<&-
fi
if [ -f /etc/exports ] && grep -q '^[[:space:]]*[^#]*/' /etc/exports; then
AUTO_NEED_IDMAPD=yes
fi
case "$NEED_STATD" in
yes|no)
;;
*)
NEED_STATD=yes
;;
esac
case "$NEED_IDMAPD" in
yes|no)
;;
*)
NEED_IDMAPD=$AUTO_NEED_IDMAPD
;;
esac
case "$NEED_GSSD" in
yes|no)
;;
*)
NEED_GSSD=$AUTO_NEED_GSSD
;;
esac
do_modprobe() {
if [ -x /sbin/modprobe -a -f /proc/modules ]
then
modprobe -q "$1" || true
fi
}
do_mount() {
if ! grep -E -qs "$1\$" /proc/filesystems
then
return 1
fi
if ! mountpoint -q "$2"
then
mount -t "$1" "$1" "$2"
return
fi
return 0
}
do_umount() {
if mountpoint -q "$1"
then
umount "$1"
fi
return 0
}
case "$1" in
start)
log_daemon_msg "Starting $DESC"
if [ "$NEED_STATD" = yes ]; then
log_progress_msg "statd"
# See if portmap or rpcbind are running
(cat </dev/null >/dev/tcp/localhost/111) 2>/dev/null
RET=$?
if [ $RET != 0 ]; then
echo
log_warning_msg "Not starting: portmap daemon is not running"
exit 0
fi
start-stop-daemon --start --oknodo --quiet \
--pidfile /var/run/rpc.statd.pid \
--exec $PREFIX/sbin/rpc.statd -- $STATDOPTS
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
else
mkdir -p /lib/init/rw/sendsigs.omit.d
rm -f /lib/init/rw/sendsigs.omit.d/statd
ln -s /var/run/rpc.statd.pid /lib/init/rw/sendsigs.omit.d/statd
fi
fi
# Don't start idmapd and gssd if we don't have them (say, if /usr is not
# up yet).
[ -x /usr/sbin/rpc.idmapd ] || NEED_IDMAPD=no
[ -x /usr/sbin/rpc.gssd ] || NEED_GSSD=no
if [ "$NEED_IDMAPD" = yes ] || [ "$NEED_GSSD" = yes ]
then
do_modprobe sunrpc
do_modprobe nfs
do_modprobe nfsd
if do_mount rpc_pipefs $PIPEFS_MOUNTPOINT
then
if [ "$NEED_IDMAPD" = yes ]
then
log_progress_msg "idmapd"
start-stop-daemon --start --oknodo --quiet \
--exec /usr/sbin/rpc.idmapd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_GSSD" = yes ]
then
do_modprobe rpcsec_gss_krb5
log_progress_msg "gssd"
# we need this available; better to fail now than
# mysteriously on the first mount
if ! grep -q -E '^nfs[ ]' /etc/services; then
log_action_end_msg 1 "broken /etc/services, please see
/usr/share/doc/nfs-common/README.Debian.nfsv4"
exit 1
fi
start-stop-daemon --start --oknodo --quiet \
--exec /usr/sbin/rpc.gssd -- $RPCGSSDOPTS
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
fi
fi
log_end_msg 0
;;
stop)
log_daemon_msg "Stopping $DESC"
if [ "$NEED_GSSD" = yes ]
then
log_progress_msg "gssd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.gssd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_IDMAPD" = yes ]
then
log_progress_msg "idmapd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.idmapd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_STATD" = yes ]
then
log_progress_msg "statd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.statd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
do_umount $PIPEFS_MOUNTPOINT 2>/dev/null || true
log_end_msg 0
;;
status)
if [ "$NEED_STATD" = yes ]
then
if ! pidof rpc.statd >/dev/null
then
echo "rpc.statd not running"
exit 3
fi
fi
if [ "$NEED_GSSD" = yes ]
then
if ! pidof rpc.gssd >/dev/null
then
echo "rpc.gssd not running"
exit 3
fi
fi
if [ "$NEED_IDMAPD" = yes ]
then
if ! pidof rpc.idmapd >/dev/null
then
echo "rpc.idmapd not running"
exit 3
fi
fi
echo "all daemons running"
exit 0
;;
restart | force-reload)
$0 stop
sleep 1
$0 start
;;
*)
log_success_msg "Usage: nfs-common {start|stop|status|restart}"
exit 1
;;
esac
exit 0
-- no debconf information
-- debsums errors found:
debsums: changed file /var/lib/nfs/state (from nfs-common package)
--- End Message ---
--- Begin Message ---
Source: nfs-utils
Source-Version: 1:1.2.3-3
We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive:
nfs-common_1.2.3-3_i386.deb
to main/n/nfs-utils/nfs-common_1.2.3-3_i386.deb
nfs-kernel-server_1.2.3-3_i386.deb
to main/n/nfs-utils/nfs-kernel-server_1.2.3-3_i386.deb
nfs-utils_1.2.3-3.debian.tar.bz2
to main/n/nfs-utils/nfs-utils_1.2.3-3.debian.tar.bz2
nfs-utils_1.2.3-3.dsc
to main/n/nfs-utils/nfs-utils_1.2.3-3.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luk Claes <[email protected]> (supplier of updated nfs-utils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 18 Jun 2011 10:48:28 +0200
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source i386
Version: 1:1.2.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian kernel team <[email protected]>
Changed-By: Luk Claes <[email protected]>
Description:
nfs-common - NFS support files common to client and server
nfs-kernel-server - support for NFS kernel server
Closes: 621027 624261 629420
Changes:
nfs-utils (1:1.2.3-3) unstable; urgency=medium
.
[ Luk Claes ]
* Remove build dependency on librpcsecgss-dev as it's superseded by
libtirpc-dev
* Remove very old versioned dependencies on netbase and libblkid1
* Exclude state files from dh_md5sum
* Use rpcinfo instead of /dev/tcp redirection
* Fix CVE-2011-1749: Anticipate RLIMIT_FSIZE (Closes: #629420)
* start-statd: Use bash (Closes: #621027)
* Add build-arch and build-indep makefile targets to debian/rules
* Add override for setuid mount.nfs
.
[ Ben Hutchings ]
* statd.man, nfsiostat.man: Fix syntax errors, thanks to Simon Paillard
(Closes: #624261)
* exports.man: Fix syntax errors
* nfs.man: Fix syntax errors and improve tabulation
Checksums-Sha1:
1d6af0538949c4875e1133447c22c3530d359182 1458 nfs-utils_1.2.3-3.dsc
0f0643b2b85f36cc1babb79e56a612a3a02be9ba 39521 nfs-utils_1.2.3-3.debian.tar.bz2
99f6de73681db0eac34a350c51196228c453ae40 162898
nfs-kernel-server_1.2.3-3_i386.deb
bd605beda4308544989298ff16d5ff9b6f24cd14 256248 nfs-common_1.2.3-3_i386.deb
Checksums-Sha256:
88b6160e2dd660a695c366e5f39eca02db03955aa593cc9b8f8644bac5fe4eea 1458
nfs-utils_1.2.3-3.dsc
50e484b29053acbe9800d3c332681b517b0ec3f46a075f4d8178124ed1176868 39521
nfs-utils_1.2.3-3.debian.tar.bz2
3e3c5be7c7c87aa08945db6820034bc11cc557d9cf6270268f0697d8fccfc962 162898
nfs-kernel-server_1.2.3-3_i386.deb
7c5eb07c6c32c5f219c4cce362574d5363e476400c4510311087bc4c2630966e 256248
nfs-common_1.2.3-3_i386.deb
Files:
5dfe4b4bb75456c06fba9574431c33a7 1458 net standard nfs-utils_1.2.3-3.dsc
a4645b5ae988bb25435fd3fe5295f9ad 39521 net standard
nfs-utils_1.2.3-3.debian.tar.bz2
69d014f9e2ad432b7fd21cb91c02b6d2 162898 net optional
nfs-kernel-server_1.2.3-3_i386.deb
6e0cb2a657e23a8a373379025efea401 256248 net standard
nfs-common_1.2.3-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk38Z8cACgkQ5UTeB5t8Mo3/bACfbOj5AvhUhBiVeUg0fq+9hni+
vA0AnjIN19Ojy5ujboPzRZvmqqNCXsI9
=ATde
-----END PGP SIGNATURE-----
--- End Message ---