level Reply-To: Tobias Koch <[EMAIL PROTECTED]>, [EMAIL PROTECTED] Resent-From: Tobias Koch <[EMAIL PROTECTED]> Resent-To: [EMAIL PROTECTED] Resent-CC: [EMAIL PROTECTED], Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org> Resent-Date: Sun, 24 Aug 2008 20:36:01 +0000 Resent-Message-ID: <[EMAIL PROTECTED]> Resent-Sender: [EMAIL PROTECTED] X-Debian-PR-Message: report 496452 X-Debian-PR-Package: kvpnc X-Debian-PR-Keywords: X-Debian-PR-Source: kvpnc Received: via spool by [EMAIL PROTECTED] id=B.121961013831012 (code B ref -1); Sun, 24 Aug 2008 20:36:01 +0000 Received: (at submit) by bugs.debian.org; 24 Aug 2008 20:35:38 +0000 X-Spam-Checker-Version: SpamAssassin 3.1.4-bugs.debian.org_2005_01_02 (2006-07-26) on rietz.debian.org X-Spam-Level: X-Spam-Status: No, score=-8.3 required=4.0 tests=BAYES_00,DNS_FROM_RFC_POST, FORGED_RCVD_HELO,FOURLA,HAS_PACKAGE,IMPRONONCABLE_2,RCVD_IN_SORBS_DUL, SUBJECT_ENCODED_TWICE,SUBJECT_EXCESS_QP,XMAILER_REPORTBUG, X_DEBBUGS_CC autolearn=no version=3.1.4-bugs.debian.org_2005_01_02 Received: from p54a74205.dip.t-dialin.net ([84.167.66.5] helo=adriano.tojoko.dyndns.org) by rietz.debian.org with esmtp (Exim 4.63) (envelope-from <[EMAIL PROTECTED]>) id 1KXMJF-00083Z-LL for [EMAIL PROTECTED]; Sun, 24 Aug 2008 20:35:37 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Tobias Koch <[EMAIL PROTECTED]> To: Debian Bug Tracking System <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> X-Mailer: reportbug 3.44 Date: Sun, 24 Aug 2008 22:35:36 +0200 Delivered-To: [EMAIL PROTECTED]
Package: kvpnc Version: 0.9.0-1 Severity: important The default script security level of the openvpn package in lenny does not allow the execution of user-defined programs or scripts. kvpnc, which uses hook scripts with openvpn to import for example routing information, which is pushed from the server to the client, is not aware of this. Bringing up the VPN connection fails with the error message shown below. As far as I can tell, there is no way to set the script security level in kvpnc or to configure kvpnc to pass additional arguments to the vpn server executable. I'm not sure if this should be rated 'important', as it's less of a bug than rather a missing feature, but it sure will hurt many users. Cheers, Tobias Debug: [openvpn] Sun Aug 24 22:00:51 2008 /home/tobias/.kde/share/apps/kvpnc/openvpn.office.up tun0 1500 1544 192.168.253.6 192.168.253.5 init Debug: [openvpn] Sun Aug 24 22:00:51 2008 openvpn_execve: external program may not be called due to setting of --script-security level Debug: [openvpn] Sun Aug 24 22:00:51 2008 script failed: external program fork failed Debug: [openvpn] Sun Aug 24 22:00:51 2008 Exiting Debug: OpenvpnManagementHandler raw: >FATAL:script failed: external program fork failed Debug: OpenvpnManagementHandler: eine andere management-Nachricht wurde bekommen: >FATAL:script failed: external program fork failed -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (990, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.25-2-686-bigmem (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages kvpnc depends on: ii gksu 2.0.0-5 graphical frontend to su ii kdelibs4c2a 4:3.5.9.dfsg.1-6 core libraries and binaries for al ii libc6 2.7-13 GNU C Library: Shared libraries ii libgcrypt11 1.4.1-1 LGPL Crypto library - runtime libr ii libqt3-mt 3:3.3.8b-5 Qt GUI Library (Threaded runtime v ii libstdc++6 4.3.1-2 The GNU Standard C++ Library v3 ii menu 2.1.40 generates programs menu for all me ii module-init-tools 3.4-1 tools for managing Linux kernel mo ii net-tools 1.60-19 The NET-3 networking toolkit ii psmisc 22.6-1 Utilities that use the proc filesy kvpnc recommends no packages. Versions of packages kvpnc suggests: ii iptables 1.4.1.1-2 administration tools for packet fi pn openct <none> (no description available) pn opensc <none> (no description available) ii openssl 0.9.8g-13 Secure Socket Layer (SSL) binary a pn openswan <none> (no description available) ii openvpn 2.1~rc9-3 virtual private network daemon pn pptp-linux <none> (no description available) pn racoon <none> (no description available) pn vpnc <none> (no description available) pn xl2tpd <none> (no description available) -- no debconf information _______________________________________________ pkg-kde-extras mailing list pkg-kde-extras@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-kde-extras