Your message dated Sat, 18 Jun 2011 09:02:42 +0000
with message-id <[email protected]>
and subject line Bug#621027: fixed in nfs-utils 1:1.2.3-3
has caused the Debian Bug report #621027,
regarding bashism in /usr/sbin/start-statd
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
621027: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621027
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nfs-common
Version: 1:1.2.3-2
Severity: normal

rpcinfo: can't contact portmapper: rpcinfo: RPC: Authentication error; why = 
Client credential too weak
The package bug script /usr/share/bug/nfs-common/script exited with an error 
status (return code = 256). Do you still want to file a report? [y|N|q|?]?

reporting nevertheless.


shambhala:~> mount -t nfs -o vers=3 172.21.101.9:/vol/nfstest /mnt/zeit
/bin/sh: Illegal option -p
[...]

shambhala:~> head -1 /usr/sbin/start-statd                   
#!/bin/sh -p

shambhala:~> ls -l /bin/sh 
lrwxrwxrwx 1 root root 4 20. Dez 10:35 /bin/sh -> dash

Without -p the error message does not appear.

-- Package-specific info:
-- rpcinfo --

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (450, 'testing'), (400, 'unstable'), (110, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.38.5-tp42-snapshot-resv-size-dirty (PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages nfs-common depends on:
ii  adduser                  3.112+nmu2      add and remove users and groups
ii  initscripts              2.88dsf-13.5    scripts for initializing and shutt
ii  libc6                    2.11.2-11       Embedded GNU C Library: Shared lib
ii  libcap2                  1:2.20-1        support for getting/setting POSIX.
ii  libcomerr2               1.41.12-2       common error description library
ii  libevent-1.4-2           1.4.13-stable-1 An asynchronous event notification
ii  libgssapi-krb5-2         1.9+dfsg-1+b1   MIT Kerberos runtime libraries - k
ii  libgssglue1              0.2-2           mechanism-switch gssapi library
ii  libk5crypto3             1.9+dfsg-1+b1   MIT Kerberos runtime libraries - C
ii  libkrb5-3                1.9+dfsg-1+b1   MIT Kerberos runtime libraries
ii  libnfsidmap2             0.24-1          An nfs idmapping library
ii  libtirpc1                0.2.1-1         transport-independent RPC library
ii  libwrap0                 7.6.q-19        Wietse Venema's TCP wrappers libra
ii  lsb-base                 3.2-27          Linux Standard Base 3.2 init scrip
ii  netbase                  4.45            Basic TCP/IP networking system
ii  rpcbind                  0.2.0-6         converts RPC program numbers into 
ii  ucf                      3.0025+nmu2     Update Configuration File: preserv

Versions of packages nfs-common recommends:
ii  python                        2.6.6-14   interactive high-level object-orie

nfs-common suggests no packages.

-- Configuration Files:
/etc/init.d/nfs-common changed:
DESC="NFS common utilities"
DEFAULTFILE=/etc/default/nfs-common
PREFIX=
NEED_STATD=
NEED_IDMAPD=
NEED_GSSD=
PIPEFS_MOUNTPOINT=/var/lib/nfs/rpc_pipefs
RPCGSSDOPTS=
if [ -f $DEFAULTFILE ]; then
    . $DEFAULTFILE
fi
. /lib/lsb/init-functions
[ -x $PREFIX/sbin/rpc.statd ] || exit 0
AUTO_NEED_IDMAPD=no
AUTO_NEED_GSSD=no
if [ -f /etc/fstab ]; then
    exec 9<&0 </etc/fstab
    while read DEV MTPT FSTYPE OPTS REST
    do
        case $DEV in
            ''|\#*)
                continue
                ;;
        esac
        # FSTYPE "nfs" can be NFSv4 now
        #if [ "$FSTYPE" = "nfs4" ]; then
            AUTO_NEED_IDMAPD=yes
        #fi
        case "$OPTS" in
            
sec=krb5|*,sec=krb5|sec=krb5,*|*,sec=krb5i,*|sec=krb5i|*,sec=krb5i|sec=krb5i,*|*,sec=krb5i,*|sec=krb5p|*,sec=krb5p|sec=krb5p,*|*,sec=krb5p,*)
            AUTO_NEED_GSSD=yes
            ;;
        esac
    done
    exec 0<&9 9<&-
fi
if [ -f /etc/exports ] && grep -q '^[[:space:]]*[^#]*/' /etc/exports; then
    AUTO_NEED_IDMAPD=yes
fi
case "$NEED_STATD" in
    yes|no)
        ;;
    *)
        NEED_STATD=yes
        ;;
esac
case "$NEED_IDMAPD" in
    yes|no)     
        ;;
    *)
        NEED_IDMAPD=$AUTO_NEED_IDMAPD
        ;;
esac
case "$NEED_GSSD" in
    yes|no)     
        ;;
    *)
        NEED_GSSD=$AUTO_NEED_GSSD
        ;;
esac
do_modprobe() {
    if [ -x /sbin/modprobe -a -f /proc/modules ]
    then
        modprobe -q "$1" || true
    fi
}
do_mount() {
    if ! grep -E -qs "$1\$" /proc/filesystems
    then
        return 1
    fi
    if ! mountpoint -q "$2"
    then
        mount -t "$1" "$1" "$2"
        return
    fi
    return 0
}
do_umount() {
    if mountpoint -q "$1"
    then
        umount "$1"
    fi
    return 0
}
case "$1" in
  start)
        log_daemon_msg "Starting $DESC"
        if [ "$NEED_STATD" = yes ]; then
            log_progress_msg "statd"
            
            # See if portmap or rpcbind are running
            (cat </dev/null >/dev/tcp/localhost/111) 2>/dev/null
            RET=$?
            if [ $RET != 0 ]; then
                echo
                log_warning_msg "Not starting: portmap daemon is not running"
                exit 0
            fi
            start-stop-daemon --start --oknodo --quiet \
                --pidfile /var/run/rpc.statd.pid \
                --exec $PREFIX/sbin/rpc.statd -- $STATDOPTS
            RET=$?
            if [ $RET != 0 ]; then
                log_end_msg $RET
                exit $RET
            else
                mkdir -p /lib/init/rw/sendsigs.omit.d
                rm -f /lib/init/rw/sendsigs.omit.d/statd
                ln -s /var/run/rpc.statd.pid /lib/init/rw/sendsigs.omit.d/statd
            fi
        fi
        # Don't start idmapd and gssd if we don't have them (say, if /usr is not
        # up yet).
        [ -x /usr/sbin/rpc.idmapd ] || NEED_IDMAPD=no
        [ -x /usr/sbin/rpc.gssd   ] || NEED_GSSD=no
        if [ "$NEED_IDMAPD" = yes ] || [ "$NEED_GSSD" = yes ]
        then
            do_modprobe sunrpc
            do_modprobe nfs
            do_modprobe nfsd
            if do_mount rpc_pipefs $PIPEFS_MOUNTPOINT
            then
                if [ "$NEED_IDMAPD" = yes ]
                then
                    log_progress_msg "idmapd"
                    start-stop-daemon --start --oknodo --quiet \
                            --exec /usr/sbin/rpc.idmapd
                    RET=$?
                    if [ $RET != 0 ]; then
                        log_end_msg $RET
                        exit $RET
                    fi
                fi
                if [ "$NEED_GSSD" = yes ]
                then
                    do_modprobe rpcsec_gss_krb5
                    log_progress_msg "gssd"
                    # we need this available; better to fail now than
                    # mysteriously on the first mount
                    if ! grep -q -E '^nfs[       ]' /etc/services; then
                        log_action_end_msg 1 "broken /etc/services, please see 
/usr/share/doc/nfs-common/README.Debian.nfsv4"
                        exit 1
                    fi
                    start-stop-daemon --start --oknodo --quiet \
                            --exec /usr/sbin/rpc.gssd -- $RPCGSSDOPTS
                    RET=$?
                    if [ $RET != 0 ]; then
                        log_end_msg $RET
                        exit $RET
                    fi
                fi
            fi
        fi
        log_end_msg 0
        ;;
  stop)
        log_daemon_msg "Stopping $DESC"
        if [ "$NEED_GSSD" = yes ]
        then
            log_progress_msg "gssd"
            start-stop-daemon --stop --oknodo --quiet \
                    --name rpc.gssd
            RET=$?
            if [ $RET != 0 ]; then
                log_end_msg $RET
                exit $RET
            fi
        fi
        if [ "$NEED_IDMAPD" = yes ]
        then
            log_progress_msg "idmapd"
            start-stop-daemon --stop --oknodo --quiet \
                --name rpc.idmapd
            RET=$?
            if [ $RET != 0 ]; then
                log_end_msg $RET
                exit $RET
            fi
        fi
        if [ "$NEED_STATD" = yes ]
        then
            log_progress_msg "statd"
            start-stop-daemon --stop --oknodo --quiet \
                --name rpc.statd
            RET=$?
            if [ $RET != 0 ]; then
                log_end_msg $RET
                exit $RET
            fi
        fi
        do_umount $PIPEFS_MOUNTPOINT 2>/dev/null || true
        log_end_msg 0
        ;;
  status)
        if [ "$NEED_STATD" = yes ]
        then
            if ! pidof rpc.statd >/dev/null
            then
                echo "rpc.statd not running"
                exit 3
            fi
        fi
        if [ "$NEED_GSSD" = yes ]
        then
            if ! pidof rpc.gssd >/dev/null
            then
                echo "rpc.gssd not running"
                exit 3
            fi
        fi
        if [ "$NEED_IDMAPD" = yes ]
        then
            if ! pidof rpc.idmapd >/dev/null
            then
                echo "rpc.idmapd not running"
                exit 3
            fi
        fi
        echo "all daemons running"
        exit 0
        ;;
  restart | force-reload)
        $0 stop
        sleep 1
        $0 start
        ;;
  *)
        log_success_msg "Usage: nfs-common {start|stop|status|restart}"
        exit 1
        ;;
esac
exit 0


-- no debconf information

-- debsums errors found:
debsums: changed file /var/lib/nfs/state (from nfs-common package)



--- End Message ---
--- Begin Message ---
Source: nfs-utils
Source-Version: 1:1.2.3-3

We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive:

nfs-common_1.2.3-3_i386.deb
  to main/n/nfs-utils/nfs-common_1.2.3-3_i386.deb
nfs-kernel-server_1.2.3-3_i386.deb
  to main/n/nfs-utils/nfs-kernel-server_1.2.3-3_i386.deb
nfs-utils_1.2.3-3.debian.tar.bz2
  to main/n/nfs-utils/nfs-utils_1.2.3-3.debian.tar.bz2
nfs-utils_1.2.3-3.dsc
  to main/n/nfs-utils/nfs-utils_1.2.3-3.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luk Claes <[email protected]> (supplier of updated nfs-utils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 18 Jun 2011 10:48:28 +0200
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source i386
Version: 1:1.2.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian kernel team <[email protected]>
Changed-By: Luk Claes <[email protected]>
Description: 
 nfs-common - NFS support files common to client and server
 nfs-kernel-server - support for NFS kernel server
Closes: 621027 624261 629420
Changes: 
 nfs-utils (1:1.2.3-3) unstable; urgency=medium
 .
   [ Luk Claes ]
   * Remove build dependency on librpcsecgss-dev as it's superseded by
     libtirpc-dev
   * Remove very old versioned dependencies on netbase and libblkid1
   * Exclude state files from dh_md5sum
   * Use rpcinfo instead of /dev/tcp redirection
   * Fix CVE-2011-1749: Anticipate RLIMIT_FSIZE (Closes: #629420)
   * start-statd: Use bash (Closes: #621027)
   * Add build-arch and build-indep makefile targets to debian/rules
   * Add override for setuid mount.nfs
 .
   [ Ben Hutchings ]
   * statd.man, nfsiostat.man: Fix syntax errors, thanks to Simon Paillard
     (Closes: #624261)
   * exports.man: Fix syntax errors
   * nfs.man: Fix syntax errors and improve tabulation
Checksums-Sha1: 
 1d6af0538949c4875e1133447c22c3530d359182 1458 nfs-utils_1.2.3-3.dsc
 0f0643b2b85f36cc1babb79e56a612a3a02be9ba 39521 nfs-utils_1.2.3-3.debian.tar.bz2
 99f6de73681db0eac34a350c51196228c453ae40 162898 
nfs-kernel-server_1.2.3-3_i386.deb
 bd605beda4308544989298ff16d5ff9b6f24cd14 256248 nfs-common_1.2.3-3_i386.deb
Checksums-Sha256: 
 88b6160e2dd660a695c366e5f39eca02db03955aa593cc9b8f8644bac5fe4eea 1458 
nfs-utils_1.2.3-3.dsc
 50e484b29053acbe9800d3c332681b517b0ec3f46a075f4d8178124ed1176868 39521 
nfs-utils_1.2.3-3.debian.tar.bz2
 3e3c5be7c7c87aa08945db6820034bc11cc557d9cf6270268f0697d8fccfc962 162898 
nfs-kernel-server_1.2.3-3_i386.deb
 7c5eb07c6c32c5f219c4cce362574d5363e476400c4510311087bc4c2630966e 256248 
nfs-common_1.2.3-3_i386.deb
Files: 
 5dfe4b4bb75456c06fba9574431c33a7 1458 net standard nfs-utils_1.2.3-3.dsc
 a4645b5ae988bb25435fd3fe5295f9ad 39521 net standard 
nfs-utils_1.2.3-3.debian.tar.bz2
 69d014f9e2ad432b7fd21cb91c02b6d2 162898 net optional 
nfs-kernel-server_1.2.3-3_i386.deb
 6e0cb2a657e23a8a373379025efea401 256248 net standard 
nfs-common_1.2.3-3_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk38Z8cACgkQ5UTeB5t8Mo3/bACfbOj5AvhUhBiVeUg0fq+9hni+
vA0AnjIN19Ojy5ujboPzRZvmqqNCXsI9
=ATde
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to