Resent-From: Tobias Koch <[EMAIL PROTECTED]>
Resent-CC: [EMAIL PROTECTED], Debian KDE Extras Team 
Resent-Date: Sun, 24 Aug 2008 20:36:01 +0000
Resent-Message-ID: <[EMAIL PROTECTED]>
Resent-Sender: [EMAIL PROTECTED]
X-Debian-PR-Message: report 496452
X-Debian-PR-Package: kvpnc
X-Debian-PR-Source: kvpnc
Received: via spool by [EMAIL PROTECTED] id=B.121961013831012
          (code B ref -1); Sun, 24 Aug 2008 20:36:01 +0000
Received: (at submit) by bugs.debian.org; 24 Aug 2008 20:35:38 +0000
X-Spam-Checker-Version: SpamAssassin 3.1.4-bugs.debian.org_2005_01_02 
        (2006-07-26) on rietz.debian.org
X-Spam-Status: No, score=-8.3 required=4.0 tests=BAYES_00,DNS_FROM_RFC_POST,
        X_DEBBUGS_CC autolearn=no version=3.1.4-bugs.debian.org_2005_01_02
Received: from p54a74205.dip.t-dialin.net ([] 
        by rietz.debian.org with esmtp (Exim 4.63)
        (envelope-from <[EMAIL PROTECTED]>)
        id 1KXMJF-00083Z-LL
        for [EMAIL PROTECTED]; Sun, 24 Aug 2008 20:35:37 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Tobias Koch <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
X-Mailer: reportbug 3.44
Date: Sun, 24 Aug 2008 22:35:36 +0200

Package: kvpnc
Version: 0.9.0-1
Severity: important

The default script security level of the openvpn package in lenny does 
not allow the execution of user-defined programs or scripts. kvpnc,
which uses hook scripts with openvpn to import for example routing 
information, which is pushed from the server to the client, is not aware 
of this. Bringing up the VPN connection fails with the error message 
shown below. As far as I can tell, there is no way to set the 
script security level in kvpnc or to configure kvpnc to pass additional 
arguments to the vpn server executable.

I'm not sure if this should be rated 'important', as it's less of a bug 
than rather a missing feature, but it sure will hurt many users.


Debug: [openvpn] Sun Aug 24 22:00:51 2008 
/home/tobias/.kde/share/apps/kvpnc/openvpn.office.up tun0 1500 1544 init
Debug: [openvpn] Sun Aug 24 22:00:51 2008 openvpn_execve: external 
program may not be called due to setting of --script-security level
Debug: [openvpn] Sun Aug 24 22:00:51 2008 script failed: external 
program fork failed
Debug: [openvpn] Sun Aug 24 22:00:51 2008 Exiting
Debug: OpenvpnManagementHandler raw: >FATAL:script failed: external 
program fork failed 
Debug: OpenvpnManagementHandler: eine andere management-Nachricht wurde 
bekommen: >FATAL:script failed: external program fork failed 

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-2-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages kvpnc depends on:
ii  gksu                    2.0.0-5          graphical frontend to su
ii  kdelibs4c2a             4:3.5.9.dfsg.1-6 core libraries and binaries for al
ii  libc6                   2.7-13           GNU C Library: Shared libraries
ii  libgcrypt11             1.4.1-1          LGPL Crypto library - runtime libr
ii  libqt3-mt               3:3.3.8b-5       Qt GUI Library (Threaded runtime v
ii  libstdc++6              4.3.1-2          The GNU Standard C++ Library v3
ii  menu                    2.1.40           generates programs menu for all me
ii  module-init-tools       3.4-1            tools for managing Linux kernel mo
ii  net-tools               1.60-19          The NET-3 networking toolkit
ii  psmisc                  22.6-1           Utilities that use the proc filesy

kvpnc recommends no packages.

Versions of packages kvpnc suggests:
ii  iptables              administration tools for packet fi
pn  openct                        <none>     (no description available)
pn  opensc                        <none>     (no description available)
ii  openssl                       0.9.8g-13  Secure Socket Layer (SSL) binary a
pn  openswan                      <none>     (no description available)
ii  openvpn                       2.1~rc9-3  virtual private network daemon
pn  pptp-linux                    <none>     (no description available)
pn  racoon                        <none>     (no description available)
pn  vpnc                          <none>     (no description available)
pn  xl2tpd                        <none>     (no description available)

-- no debconf information

pkg-kde-extras mailing list

Reply via email to