Your message dated Mon, 13 May 2019 23:18:27 +0000
with message-id <[email protected]>
and subject line Bug#928877: fixed in dbus 1.13.10-1
has caused the Debian Bug report #928877,
regarding dbus: some system services' fd limits not reset with systemd >= 240
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
928877: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928877
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dbus
Version: 1.12.12-1
Severity: important
Tags: upstream fixed-upstream
Forwarded: https://gitlab.freedesktop.org/dbus/dbus/merge_requests/103
The system dbus-daemon currently sets its hard and soft RLIMIT_NOFILE
to 64K, with the intention of changing back to the rlimits with which
it was invoked when it carries out traditional system service activation
(without SystemdService). In stretch this worked fine, because dbus-daemon
was typically invoked with RLIMIT_NOFILE set to 1K (soft)/4K (hard), and
reducing limits from 64K/64K back to 1K/4K does not require privileges.
However, systemd since v240 invokes system services like dbus-daemon with
RLIMIT_NOFILE set to 1K (soft)/512K (hard)[1]. This means dbus-daemon, which
does not retain CAP_SYS_RESOURCE when it drops privileges, cannot restore
the original rlimit (because the hard limit in its original rlimit was
higher than the hard limit it is running with). This causes dbus-daemon to
log a warning and run system services with the same rlimits that
dbus-daemon itself has.
The result is that some system services are invoked with a
higher-than-intended soft limit (which might break buggy services that
assume they can select() on all fds below their soft limit, which were
the justification for systemd 240 keeping a relatively low soft limit),
and with a lower-than-intended hard limit (which might break services
that want to increase their soft limit so they can have lots of fds
open). It also results in dbus-daemon logging a warning for every
traditional activation, causing unnecessary noise in syslog.
This is already fixed in upstream git by a change that makes a privileged
dbus-daemon set its own hard and soft RLIMIT_NOFILE to
MIN(64K, its current hard limit) before dropping privileges, with the
result that dbus-daemon runs with RLIMIT_NOFILE set to 512K, and going
back to 1K (soft)/512K (hard) for traditional activation does not require
exercising CAP_SYS_RESOURCE. At the time I wrote that change I thought it
was an enhancement rather than a regression fix.
Now that I know this is a regression fix, I'm intending to release a
fixed version of dbus next week.
smcv
[1] On some systems, such as my laptop, an interaction that I don't fully
understand between systemd and pam_limits results in the hard
limit being even higher: 1M instead of 512K. On those systems,
every mention of 512K in this bug report becomes 1M, but everything
else remains true.
--- End Message ---
--- Begin Message ---
Source: dbus
Source-Version: 1.13.10-1
We believe that the bug you reported is fixed in the latest version of
dbus, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated dbus package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 13 May 2019 19:53:32 +0100
Source: dbus
Architecture: source
Version: 1.13.10-1
Distribution: experimental
Urgency: medium
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 928877
Changes:
dbus (1.13.10-1) experimental; urgency=medium
.
[ Simon McVittie ]
* New upstream development release
- Fix incorrect fd limits for services launched by the system bus
via traditional (non-systemd) activation (Closes: #928877)
- d/copyright: Update
* Explicitly enable the new --enable-traditional-activation option.
This is the upstream default anyway, but it would be a serious
regression if our dbus builds only supported systemd activation.
* d/tests/system-bus: Add a smoke-test for traditional activation,
and a smoke-test for systemd activation on systems booted with systemd.
* d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
Drop patch, applied upstream
* d/rules, d/tests: Run automated tests with DBUS_TEST_MALLOC_FAILURES=0.
Testing the code paths for memory allocation failures is too slow
to do routinely as a downstream.
* Standards-Version: 4.3.0 (no changes required)
.
[ Michael Biebl ]
* Move libraries to /usr/lib.
Since we can rely on /usr being available during early boot nowadays,
there is no longer a need to move any libraries to /lib.
Checksums-Sha1:
c0b14c67064f6b0ecf05913ef382c6906f66e0db 3775 dbus_1.13.10-1.dsc
0b28f1e611ac043fba3318102f65fbade91457af 1336160 dbus_1.13.10.orig.tar.xz
2fb6db7acf0336869e7ab9f775ded71ff8e8d0b0 833 dbus_1.13.10.orig.tar.xz.asc
0701af8e0c1058dd999fa4040e1f51671c652616 63960 dbus_1.13.10-1.debian.tar.xz
8f10d0006fbe53881b68f3e0aa7ef2821618a692 7062 dbus_1.13.10-1_source.buildinfo
Checksums-Sha256:
3303e3e092d2ee3c73520e027cb729131ea604b0941d506e3d50d1ecb92675ef 3775
dbus_1.13.10-1.dsc
a11239e504b99adfa9ded0bbdb2f752fd51f1afc768d78a7e5642282622855f2 1336160
dbus_1.13.10.orig.tar.xz
4309c0024cd2132d9111a6d65283709bc6b11fc1bc71a3e21bc0ab8b79e73b9e 833
dbus_1.13.10.orig.tar.xz.asc
dbbd61bd45219029f0dc8235d5260a776123f2923ae74e9069fdc05554478a4a 63960
dbus_1.13.10-1.debian.tar.xz
57aa44fd53a245a6b37a0db2c03883437f308a81454a4cce326a4b05528a2f93 7062
dbus_1.13.10-1_source.buildinfo
Files:
37c65c575b87a886be269f5da7838e3e 3775 admin optional dbus_1.13.10-1.dsc
27d2b9eec19b4d9dc3c1b8f58abd2166 1336160 admin optional
dbus_1.13.10.orig.tar.xz
662985b191bd8a5351d597a0133f8329 833 admin optional
dbus_1.13.10.orig.tar.xz.asc
7050ba0f1fac91bf98411c4681ea6b51 63960 admin optional
dbus_1.13.10-1.debian.tar.xz
34d7744e877dba274cb21d0b5272f10d 7062 admin optional
dbus_1.13.10-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=a74k
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
