Your message dated Sat, 28 Jun 2008 17:32:15 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#487999: fixed in devscripts 2.10.31
has caused the Debian Bug report #487999,
regarding devscripts: [debsign] do not assume directory write permission
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
487999: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487999
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: devscripts
Version: 2.10.30
Severity: normal
Tags: patch
This is fix to the root cause of one minor annoiance of pbuilder ...
You can not auto sign packages build by pbuilder as default
installation. This is because:
$ ls -ld /var/cache/pbuilder/result
drwxrwxr-x 2 root root 4096 2008-06-25 09:36 /var/cache/pbuilder/result
Of course, by chgrp etc., we can make it work.
But the root cause is debsign tries to create temporary file on the
directory where files to be signed exist. There is no gurantee. We
should use standard complying tempfile creation. Since some of the
devscripts programs uses `tempfile` command, I followed as the
attached patch (copyright donated to main authors of this script).
This enables us to sign files as long as they are readable and writable file
where ever they are as long as the file system is RW.
Osamu
-- Package-specific info:
--- /etc/devscripts.conf ---
--- ~/.devscripts ---
DEBSIGN_KEYID="A8061F32"
DEBUILD_DPKG_BUILDPACKAGE_OPTS="-i -I"
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.25-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages devscripts depends on:
ii dpkg-dev 1.14.20 Debian package development tools
ii libc6 2.7-12 GNU C Library: Shared libraries
ii perl 5.10.0-11 Larry Wall's Practical Extraction
Versions of packages devscripts recommends:
ii at 3.1.10.1 Delayed job execution and batch pr
ii bsd-mailx [mailx] 8.1.2-0.20071201cvs-3 A simple mail user agent
ii curl 7.18.2-1 Get a file from an HTTP, HTTPS or
ii cvs 1:1.12.13-11 Concurrent Versions System
ii dctrl-tools 2.12 Command-line tools to process Debi
ii debian-keyring 2008.05.28 GnuPG (and obsolete PGP) keys of D
ii debian-maintainers 1.37 GPG keys of Debian maintainers
ii dupload 2.6.4 utility to upload Debian packages
ii elvis [www-browser 2.2.0-10 powerful clone of the vi/ex text e
ii epiphany-gecko [ww 2.22.2-3 Intuitive GNOME web browser - Geck
ii equivs 2.0.7-0.1 Circumvent Debian package dependen
ii fakeroot 1.9.5 Gives a fake root environment
ii git-core 1:1.5.6-1 fast, scalable, distributed revisi
ii gnupg 1.4.9-2 GNU privacy guard - a free PGP rep
ii iceweasel [www-bro 3.0~rc2-2 lightweight web browser based on M
ii libauthen-sasl-per 2.11-1 Authen::SASL - SASL Authentication
ii libcrypt-ssleay-pe 0.57-1+b1 Support for https protocol in LWP
ii libparse-debcontro 2.005-2 Easy OO parsing of Debian control-
ii libsoap-lite-perl 0.710.06-1 Client and server side SOAP implem
ii libterm-size-perl 0.2-4+b1 Perl extension for retrieving term
ii libtimedate-perl 1.1600-9 Time and date functions for Perl
ii liburi-perl 1.35.dfsg.1-1 Manipulates and accesses URI strin
ii libwww-perl 5.812-1 WWW client/server library for Perl
ii libyaml-syck-perl 1.05-1 Fast, lightweight YAML loader and
ii lintian 1.24.1 Debian package checker
ii lsb-release 3.2-12 Linux Standard Base version report
ii mailx 1:20071201-3 Transitional package for mailx ren
ii man-db 2.5.2-1 on-line manual pager
ii openssh-client [ss 1:4.7p1-12 secure shell client, an rlogin/rsh
ii patch 2.5.9-5 Apply a diff file to an original
ii patchutils 0.2.31-4 Utilities to work with patches
ii strace 4.5.15-1.2 A system call tracer
ii subversion 1.4.6dfsg1-4 Advanced version control system
ii unzip 5.52-11 De-archiver for .zip files
ii w3m [www-browser] 0.5.2-2 WWW browsable pager with excellent
ii wdiff 0.5-18 Compares two files word by word
ii wget 1.11.3-1 retrieves files from the web
-- no debconf information
diff -Nru devscripts-2.10.30-orig/debian/changelog devscripts-2.10.30+nmu1/debian/changelog
--- devscripts-2.10.30-orig/debian/changelog 2008-06-17 04:00:01.000000000 +0900
+++ devscripts-2.10.30+nmu1/debian/changelog 2008-06-26 01:10:18.000000000 +0900
@@ -1,3 +1,11 @@
+devscripts (2.10.30+nmu1) NOT-RELEASED-unstable; urgency=low
+
+ * Non-maintainer upload. (I will not!)
+ * debsign: Do not assume directory write permission of directory of
+ the file to be signed.
+
+ -- Osamu Aoki <[EMAIL PROTECTED]> Thu, 26 Jun 2008 01:06:01 +0900
+
devscripts (2.10.30) unstable; urgency=low
* bts: MIME-encode the Subject: header of the generated mail in case it
diff -Nru devscripts-2.10.30-orig/scripts/debsign.sh devscripts-2.10.30+nmu1/scripts/debsign.sh
--- devscripts-2.10.30-orig/scripts/debsign.sh 2008-05-06 00:04:49.000000000 +0900
+++ devscripts-2.10.30+nmu1/scripts/debsign.sh 2008-06-26 01:19:52.000000000 +0900
@@ -107,6 +107,7 @@
# of dpkg-buildpackage, because we do not know all of the necessary
# information when this function is read first.
signfile () {
+ ASCII_SIGNED_FILE=`tempfile --prefix=$1. --suffix=.asc`
local savestty=$(stty -g 2>/dev/null) || true
if [ $signinterface = gpg ]
then
@@ -118,7 +119,7 @@
(cat "$1" ; echo "") | \
$signcommand --local-user "$2" --clearsign \
--list-options no-show-policy-urls \
- --armor --textmode --output - - > "$1.asc" || \
+ --armor --textmode --output - - > "$ASCII_SIGNED_FILE" || \
{ SAVESTAT=$?
echo "$PROGNAME: gpg error occurred! Aborting...." >&2
stty $savestty 2>/dev/null || true
@@ -128,7 +129,7 @@
(cat "$1" ; echo "") | \
$signcommand --local-user "$2" --clearsign \
--no-show-policy-url \
- --armor --textmode --output - - > "$1.asc" || \
+ --armor --textmode --output - - > "$ASCII_SIGNED_FILE" || \
{ SAVESTAT=$?
echo "$PROGNAME: gpg error occurred! Aborting...." >&2
stty $savestty 2>/dev/null || true
@@ -136,12 +137,12 @@
}
fi
else
- $signcommand -u "$2" +clearsig=on -fast < "$1" > "$1.asc"
+ $signcommand -u "$2" +clearsig=on -fast < "$1" > "$ASCII_SIGNED_FILE"
fi
stty $savestty 2>/dev/null || true
echo
PRECIOUS_FILES=$(($PRECIOUS_FILES + 1))
- mv -f -- "$1.asc" "$1"
+ cat "$ASCII_SIGNED_FILE" > "$1"
}
withecho () {
--- End Message ---
--- Begin Message ---
Source: devscripts
Source-Version: 2.10.31
We believe that the bug you reported is fixed in the latest version of
devscripts, which is due to be installed in the Debian FTP archive:
devscripts_2.10.31.dsc
to pool/main/d/devscripts/devscripts_2.10.31.dsc
devscripts_2.10.31.tar.gz
to pool/main/d/devscripts/devscripts_2.10.31.tar.gz
devscripts_2.10.31_amd64.deb
to pool/main/d/devscripts/devscripts_2.10.31_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Adam D. Barratt <[EMAIL PROTECTED]> (supplier of updated devscripts package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 28 Jun 2008 10:24:56 -0700
Source: devscripts
Binary: devscripts
Architecture: source amd64
Version: 2.10.31
Distribution: unstable
Urgency: low
Maintainer: Devscripts Devel Team <[email protected]>
Changed-By: Adam D. Barratt <[EMAIL PROTECTED]>
Description:
devscripts - scripts to make the life of a Debian Package maintainer easier
Closes: 486594 487384 487436 487513 487592 487999 488190
Changes:
devscripts (2.10.31) unstable; urgency=low
.
[ Adam D. Barratt ]
* bts
+ Replace the use of date -R with strftime(). Thanks Stephen Gran.
+ Allow an SMTP host to be specified as using SMTPS and/or a
non-standard port number
* checkbashisms:
+ Add a check for $UID being set to -x
+ Apply a small fix to part of the "quoted block detection"
+ Quote test expressions using qr to allow perl to optionally compile
or otherwise optimise them. Thanks to Frank Lichtenheld for the idea.
+ Add a --posix option which flags constructs not supported by POSIX but
permitted by Debian Policy (echo -n, local (with no options or
assignments) and test / [ using -a or -o )
+ Improve the suggested replacement for $UID and $EUID (Closes: #488190)
* Debbugs.pm: Move initialisation of the SOAP object in to a common routine
and set the underlying transport object to honour proxies from the
environment (Closes: #487592)
* debchange, nmudiff: Replace calls to date -R with strftime(). Thanks
Stephen Gran (Closes: #486594)
* debuild: Update the dpkg-buildpackage emulation to use whitespace as the
separator in DEB_BUILD_OPTIONS as per Debian Policy 3.8.0 and to print a
warning if an unrecognised option is encountered; based on the
corresponding patch to Dpkg::BuildOptions
* debsign: If we don't have permission to create files in the same location
as the originals, use a temporary location instead (Closes: #487999)
* licensecheck:
+ Add .cxx and .hxx to the default list of file extensions to check
(Closes: #487384)
+ Add _MTN (monotone) to the default exclusion expression
* rc-alert: Allow bugs matching specific sets of tags or applying to
specific distributions to be included or excluded from the list of
reported bugs (Closes: #487513)
* uscan:
+ Add an example of a newer form of watch file syntax for SourceForge
based projects to the manpage
+ If the site being checked redirects to another with a directory
structure that does not match the original site, check for download URLs
that refer to any of the redirected sites, in addition to the original
site. Based on a patch by Raphael Geissert (Closes: #487436)
* debian/control
+ Suggest libnet-smtp-ssl-perl (>= 1.01-2) in order to allow bts to
support SMTPS. The versioned dependency is required in order to ensure
that a fixed libio-socket-ssl-perl is used.
+ Add libnet-smtp-ssl-perl to the description of bts
* README: Add libnet-smtp-ssl-perl to the description of bts
.
[ James Vega ]
* Debbugs.pm
+ Actually include the documented 'severity' key for the select
function.
+ Fix some whitespace.
* who-uploads: Accept -M as a short form for --max-uploads
Checksums-Sha1:
5dd0acfd47f63967f222f19a5c3e11a4974b3d19 1393 devscripts_2.10.31.dsc
cdc456e5782ad58dfaf64671cb887fb122f16657 585804 devscripts_2.10.31.tar.gz
6f82743dc2feac142b5fa9eaea737162ed3c2264 497810 devscripts_2.10.31_amd64.deb
Checksums-Sha256:
b7c3cef1096aaf26b8f6a64ffe4851f0511a2b832d9137d54f037db2cf9395c5 1393
devscripts_2.10.31.dsc
ba23ad336deaacfb8aeacdb57f2f2545f8b26d55bce6ce33527318b20224a502 585804
devscripts_2.10.31.tar.gz
ab420e1de477edf6c848caad9d8a98de414b86133c15a4372bfbe82920de7329 497810
devscripts_2.10.31_amd64.deb
Files:
8756f2e5b7cf7f4c42861f9b21b80607 1393 devel optional devscripts_2.10.31.dsc
570d2227de13aabdcd82a117a2c1413e 585804 devel optional
devscripts_2.10.31.tar.gz
c2c4e8d805f4b03a32e29817fc7d31ad 497810 devel optional
devscripts_2.10.31_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkhmdQUACgkQokcE1TReOoVvPACfQ5/3Tb+rSN0ID1JbBLA5cf1W
cdwAn3+veiHxu3scM1lAOX7a2aONB0t5
=KJlR
-----END PGP SIGNATURE-----
--- End Message ---
