Bug#868240: isc-dhcp-server refuses to start if pidfile is present even when dhcpd is not running
Hi, I have a setup with 2 redundant (primary / secondary) DHCPd servers where both of them crash occasionally. This is a separate bug, but this solution was useful in restarting the daemons after crashing and leaving the pid files behind. To automatically restart the daemons after this modification is introduced, edit the systemd service description with systemctl edit isc-dhcp-server.service and add something like [Service] Type=forking PIDFile=dhcpd.pid Restart=on-failure StartLimitIntervalSec=60s StartLimitBurst=8 RestartSec=5s in the appropriate section. Then enable this configuration, and systemd will be able to restart DHCPd after they crash.
Bug#927024: lcdproc-extra-drivers: Missing lcd2usb ConnectionType in hd44780 driver
Package: lcdproc-extra-drivers Version: 0.5.9-3 Severity: important Dear Maintainer, When using the current lcdproc binary package 0.5.9-3 from the archive, the lcd2usb support seems to be missing: host~# locate hd44780.so /usr/lib/x86_64-linux-gnu/lcdproc/hd44780.so host~# strings /usr/lib/x86_64-linux-gnu/lcdproc/hd44780.so | grep lcd2usb host~# A simple recompilation from source (no changes) eliminates this problem: host~# apt-cache policy lcdproc lcdproc: Instalado: 0.5.9-3.1 Candidato: 0.5.9-3.1 Tabela de Versão: *** 0.5.9-3.1 100 100 /var/lib/dpkg/status host~# strings /usr/lib/x86_64-linux-gnu/lcdproc/hd44780.so | grep lcd2usb hd_init_lcd2usb lcd2usb_HD44780_uPause lcd2usb_HD44780_flush lcd2usb_HD44780_senddata lcd2usb_HD44780_scankeypad lcd2usb_HD44780_close lcd2usb_HD44780_backlight lcd2usb_HD44780_set_contrast lcd2usb lcd2usb_HD44780_backlight: Setting backlight to %d lcd2usb_HD44780_backlight: setting backlight failed lcd2usb_HD44780_set_contrast: setting contrast failed hd_init_lcd2usb: unable to open device hd_init_lcd2usb: device with firmware version %d.%02d found hd_init_lcd2usb: no (matching) LCD2USB device found hd_init_lcd2usb: could not allocate send buffer This is probably related to https://bugs.launchpad.net/ubuntu/+source/lcdproc/+bug/487300 Thanks, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-4-amd64 (SMP w/12 CPU cores) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages lcdproc-extra-drivers depends on: ii lcdproc 0.5.9-3 ii libc62.28-8 ii liblirc-client0 0.10.1-5.2 ii libusb-1.0-0 2:1.0.22-2 ii libx11-6 2:1.6.7-1 ii libxext6 2:1.3.3-1+b2 ii libxinerama1 2:1.1.4-2 ii libxosd2 2.2.14-2.1+b1 lcdproc-extra-drivers recommends no packages. lcdproc-extra-drivers suggests no packages. -- no debconf information
Bug#906436: 906436: nis: /etc/init.d/nis doesn't start ypbind, thus ypwhich timeouts
Hi again, The ypbind binary in the current package does not recognize the -no-dbus option: host:~> ypbind -no-dbus Usage: ypbind [-broadcast | -ypset | -ypsetme] [-f configfile] [-no-ping] [-broken-server] [-local-only] [-i ping-interval] [-r rebind-interval] [-debug] [-verbose] [-n | -foreground] ypbind -c [-f configfile] ypbind --version Exit 1 Michael, please update the /etc/default/nis in your package accordingly: host:~> diff /etc/default/nis /etc/default/nis.orig 28,29c28 < #YPBINDARGS=-no-dbus < YPBINDARGS= --- YPBINDARGS=-no-dbus For me this solves the problem with the client. I will update the server later and report any problems. Thanks, Nuno.
Bug#906436: 906436: nis: /etc/init.d/nis doesn't start ypbind, thus ypwhich timeouts
* Michael Biebl [2018-08-20 20:01]:
On 8/20/18 14:40, Nuno Oliveira wrote:
Hi Bertrand,
I got a similar behaviour. This is probably due to dropped
NetworkManager support in the last package version by Michael Biebl.
Presently I cannot
run sucessfully a plain
/usr/sbin/ypbind
in a startup script, not even in /etc/rc.local. If this is a run after
system startup, then nis starts normally, though.
Does ypbind need the network to be up before it can start?
If so, how do you configure your network (details please, including
configuration files.)
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
Hi Michael,
Here's some more details on this:
Both the client and NIS server are on buster. The client has the latest
package that you've uploaded (3.17.1-2), and the server still has the previous
version (3.17.1-1+b2).
With 3.17.1-1+b2 the client had no problems with NIS, and the
configuration has not changed. The server has other clients with
both versions on the NIS packages, and this behaviour is reproducible.
Presently with the latest package on the client, ypbind cannot be included
in a startup script, but runs ok manually on an interactive shell.
I've tried to run an extra ypbind on /etc/rc.local, with a wait period
so that the networking effects are stabilized for sure. During this
period I'm able to login remotely into the client, so the networking is
definitely ok. Here's the test /etc/rc.local:
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
sleep 90
/usr/sbin/service rpcbind restart
strace /usr/sbin/ypbind 2> /tmp/strace-ypbind-rc.local
/usr/sbin/service nis restart
/bin/mount -a
# Log task date:
/bin/date > /tmp/rclocal.date
exit 0
The network is set statically:
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp3s0
auto enp3s0
iface enp3s0 inet static
address 10.1.214.129
netmask 255.255.255.128
network 10.1.214.128
broadcast 10.1.214.255
gateway 10.1.214.254
# dns-* options are implemented by the resolvconf package, if
# installed
dns-nameservers 10.1.214.254 10.1.214.30
dns-search eq.uc.pt
and we avoid using NetworkManager:
host:/etc/NetworkManager# more NetworkManager.conf
[main]
plugins=ifupdown,keyfile
[ifupdown]
managed=false
I've attached the strace files for ypbind both for the rc script and the
interactive shell, but I see no big differences between these cases.
My guess is that this problem related to:
nis (3.17.1-1) unstable; urgency=medium
* ypbind 1.38, reenable Network Manager support to fix systemd
breakage killing ypbind after it daemonizes (closes: #834298).
-- Mark Brown Tue, 16 Aug 2016 11:22:19 +0100
Apparently Network Manager support in NIS was introduced to avoid ypbind
from being killed by systemd. In fact, after system startup I see no
ypbind process running in the client. With the previous package version,
I see a
/usr/sbin/ypbind -no-dbus
process running, which is required for NIS to work properly. In fact,
with the new client, I cannot even run ypbind with this option:
host:~# /usr/sbin/ypbind -no-dbus
Usage:
ypbind [-broadcast | -ypset | -ypsetme] [-f configfile]
[-no-ping] [-broken-server] [-local-only] [-i ping-interval]
[-r rebind-interval] [-debug] [-verbose] [-n | -foreground]
ypbind -c [-f configfile]
ypbind --version
ypbind with no arguments runs fine though. Any suggestion on how to fix
this messy situation?
Thanks,
Nuno.
execve("/usr/sbin/ypbind", ["/usr/sbin/ypbind"], 0x7ffefbe146e0 /* 7 vars */) = 0
brk(NULL) = 0x55ef94786000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=211744, ...}) = 0
mmap(NULL, 211744, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffa50efa000
close(3)= 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libsystemd.so.0", O_RDONLY|O_CLOEXEC) =
3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\365\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=569456,
Bug#906436: 906436: nis: /etc/init.d/nis doesn't start ypbind, thus ypwhich timeouts
Hi Bertrand, I got a similar behaviour. This is probably due to dropped NetworkManager support in the last package version by Michael Biebl. Presently I cannot run sucessfully a plain /usr/sbin/ypbind in a startup script, not even in /etc/rc.local. If this is a run after system startup, then nis starts normally, though. Regards, Nuno.
Bug#906241: falkon: unable to start after Qt 5.11.1 upgrade
Not sure if this problem is related to this: https://bugreports.qt.io/browse/QTBUG-68547 Also, while the browser is open and looping I see a continuous stream of messages like this on syslog: Aug 15 23:17:36 host dnsmasq[4195]: query[A] chromewebdata.home from 127.0.0.1 Aug 15 23:17:36 host dnsmasq[4195]: config chromewebdata.home is NXDOMAIN Aug 15 23:17:36 host dnsmasq[4195]: query[] chromewebdata.home from 127.0.0.1 Aug 15 23:17:36 host dnsmasq[4195]: config chromewebdata.home is NXDOMAIN Aug 15 23:17:36 host dnsmasq[4195]: query[A] chromewebdata.eq.uc.pt from 127.0.0.1 Aug 15 23:17:36 host dnsmasq[4195]: cached chromewebdata.eq.uc.pt is NXDOMAIN Nuno.
Bug#906241: falkon: unable to start after Qt 5.11.1 upgrade
Package: falkon Version: 3.0.0-3 Severity: important Dear Maintainer, I'm unable to start falkon after today's Qt 5.11.1 upgrade; with 5.10.1 this did not happen. In a terminal I get: user@host:~$ LANG=C falkon [0815/224521.097400:WARNING:stack_trace_posix.cc(699)] Failed to open file: /tmp/.glAquvmB (deleted) Error: Arquivo ou diretório inexistente Fontconfig error: failed reading config file Fontconfig error: failed reading config file Fontconfig error: failed reading config file Fontconfig error: failed reading config file Fontconfig error: failed reading config file Falkon: 7 extensions loaded QObject::connect: invalid null parameter The first error translates as "nonexistent archive or directory". The browser window appears but seems to be stuck in a loop where the URL "chrome-error://chromewebdata/" is being continuously reloaded. The browser is responsive, and I'm able to select a site to load from the browser history. One way to avoid this behavior is by directly loading a URL in a command line, e.g. user@host:~$ LANG=C falkon http://site.com/ & Thanks, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.17.0-1-amd64 (SMP w/24 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages falkon depends on: ii libc62.27-5 ii libgcc1 1:8.2.0-3 ii libkf5wallet-bin 5.47.0-1 ii libkf5wallet55.47.0-1 ii libqt5core5a 5.11.1+dfsg-6 ii libqt5dbus5 5.11.1+dfsg-6 ii libqt5gui5 5.11.1+dfsg-6 ii libqt5network5 5.11.1+dfsg-6 ii libqt5positioning5 5.11.1+dfsg-3 ii libqt5printsupport5 5.11.1+dfsg-6 ii libqt5qml5 5.11.1-4 ii libqt5quick5 5.11.1-4 ii libqt5quickwidgets5 5.11.1-4 ii libqt5sql5 5.11.1+dfsg-6 ii libqt5sql5-sqlite5.11.1+dfsg-6 ii libqt5webchannel55.11.1-3 ii libqt5webenginecore5 5.11.1+dfsg-5 ii libqt5webenginewidgets5 5.11.1+dfsg-5 ii libqt5widgets5 5.11.1+dfsg-6 ii libqt5x11extras5 5.11.1-2 ii libssl1.11.1.0h-4 ii libstdc++6 8.2.0-3 ii libxcb1 1.13-2 falkon recommends no packages. falkon suggests no packages. -- no debconf information
Bug#903898: Acknowledgement (thunderbird: missing AppArmor entries)
* Carsten Schoenert [2018-08-08 15:45]: Hello Vincas, On Wed, Aug 08, 2018 at 05:34:01PM +0300, Vincas Dargis wrote: On Mon, 16 Jul 2018 16:03:01 +0100 Nuno Oliveira wrote: > Hi Vincas, Carsten, > > While you are at it, you might as well consider this extra line which > appeared latter: > > /var/lib/xine/gxine.desktop r, Nuno, could you give me a hint on how to reproduce this? I can't even find package that would ship gxine.desktop: $ apt-file search /var/lib/xine/gxine.desktop I use mostly packages.d.o to search for specif files. In this case this file comes from the package gxine. https://packages.debian.org/search?searchon=contents&keywords=gxine.desktop&mode=exactfilename&suite=unstable&arch=any Regards Carsten Hi Vincas, Carsten is probably right. I can't find it's origin from the installed packages: user@host:~$ ll /var/lib/xine/gxine.desktop -rw-r--r-- 1 root root 2126 jan 5 2018 /var/lib/xine/gxine.desktop user@host:~$ dpkg -S /var/lib/xine/gxine.desktop dpkg-query: não foi encontrado caminho coincidindo com o padrão /var/lib/xine/gxine.desktop user@host:~$ apt-cache policy gxine gxine: Instalado: 0.5.910-2 Candidato: 0.5.910-2 Tabela de Versão: *** 0.5.910-2 100 100 /var/lib/dpkg/status 0.5.908-3.1+b1 600 600 https:///debian stable/main amd64 Packages I've removed it now, since it looks as old cruft. Thanks, Nuno.
Bug#903898: Acknowledgement (thunderbird: missing AppArmor entries)
Hi Vincas, Carsten,
While you are at it, you might as well consider this extra line which
appeared latter:
/var/lib/xine/gxine.desktop r,
Thanks,
Nuno.
* Carsten Schoenert [2018-07-16 15:58]:
Hello Vincas,
may I point you to this report?
Regards
Carsten
On Mon, Jul 16, 2018 at 12:45:49PM +0100, Nuno Oliveira wrote:
Actually, better make it:
### Extra:
/sys/devices/system/memory/block_size_bytes r,
owner @{HOME}/.nv/.gl* rwm,
owner /tmp/.gl* rwm,
Regards,
Nuno.
Bug#903898: Acknowledgement (thunderbird: missing AppArmor entries)
Actually, better make it:
### Extra:
/sys/devices/system/memory/block_size_bytes r,
owner @{HOME}/.nv/.gl* rwm,
owner /tmp/.gl* rwm,
Regards,
Nuno.
Bug#903900: libreoffice-common: missing AppArmor entries
Package: libreoffice-common Version: 1:6.0.6~rc1-1 Severity: normal The following seem to be required, to avoid AppArmor from complaining from file acess: ### Extra: /dev/nvidia0 rw, /dev/nvidiactl rw, /dev/nvidia-modeset rw, /etc/java-8-openjdk/security/java.security r, owner /tmp/.gl* rwm, /proc/driver/nvidia/params r, /proc/modules r, /sys/devices/system/memory/block_size_bytes r, /usr/share/nvidia/nvidia-application-profiles-* r, Regards, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.16.0-2-amd64 (SMP w/24 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libreoffice-common depends on: ii libreoffice-style-tango 1:6.0.6~rc1-1 ii ure 6.0.6~rc1-1 Versions of packages libreoffice-common recommends: ii fonts-liberation2 2.00.1-7 ii libexttextcat-data 3.4.5-1 ii python3-uno1:6.0.6~rc1-1 ii ttf-mscorefonts-installer 3.7 ii xdg-utils 1.1.3-1 Versions of packages libreoffice-common suggests: ii libreoffice-style-breeze [libreoffice-style] 1:6.0.6~rc1-1 ii libreoffice-style-galaxy [libreoffice-style] 1:6.0.6~rc1-1 ii libreoffice-style-hicontrast [libreoffice-style] 1:6.0.6~rc1-1 ii libreoffice-style-tango [libreoffice-style] 1:6.0.6~rc1-1 Versions of packages python3-uno depends on: ii libc6 2.27-3 ii libgcc1 1:8.1.0-9 ii libpython3.6 3.6.6-1 ii libreoffice-core 1:6.0.6~rc1-1 ii libstdc++68.1.0-9 ii python3 3.6.5-3 ii python3.6 3.6.6-1 ii uno-libs3 6.0.6~rc1-1 ii ure 6.0.6~rc1-1 -- no debconf information
Bug#903898: thunderbird: missing AppArmor entries
Package: thunderbird
Version: 1:52.9.1-1
Severity: normal
Dear Maintainer,
The following seem to be required, to avoid AppArmor from complaining from file
acess:
### Extra:
/sys/devices/system/memory/block_size_bytes r,
owner @{HOME}/.nv/.gl** rwm,
owner /tmp/.gl** rwm,
Regards,
Nuno.
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.16.0-2-amd64 (SMP w/24 CPU cores)
Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL
set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set
to pt_PT.UTF8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages thunderbird depends on:
ii debianutils 4.8.6
ii fontconfig2.13.0-5
ii libatk1.0-0 2.28.1-1
ii libc6 2.27-3
ii libcairo-gobject2 1.15.10-3
ii libcairo2 1.15.10-3
ii libdbus-1-3 1.12.8-3
ii libdbus-glib-1-2 0.110-2
ii libevent-2.1-62.1.8-stable-4
ii libffi6 3.2.1-8
ii libfontconfig12.13.0-5
ii libfreetype6 2.8.1-2
ii libgcc1 1:8.1.0-9
ii libgdk-pixbuf2.0-02.36.11-2
ii libglib2.0-0 2.56.1-2
ii libgtk-3-03.22.30-2
ii libhunspell-1.6-0 1.6.2-1+b1
ii libpango-1.0-01.42.1-2
ii libpangocairo-1.0-0 1.42.1-2
ii libpangoft2-1.0-0 1.42.1-2
ii libpixman-1-0 0.34.0-2
ii libstartup-notification0 0.12-5
ii libstdc++68.1.0-9
ii libvpx5 1.7.0-3
ii libx11-6 2:1.6.5-1
ii libx11-xcb1 2:1.6.5-1
ii libxcb-shm0 1.13-1
ii libxcb1 1.13-1
ii libxcomposite11:0.4.4-2
ii libxdamage1 1:1.1.4-3
ii libxext6 2:1.3.3-1+b2
ii libxfixes31:5.0.3-1
ii libxrender1 1:0.9.10-1
ii libxt61:1.1.5-1
ii psmisc23.1-1+b1
ii x11-utils 7.7+4
ii zlib1g1:1.2.11.dfsg-1
Versions of packages thunderbird recommends:
ii hunspell-en-us [hunspell-dictionary] 1:2018.04.16-1
ii lightning 1:52.9.1-1
ii myspell-pt-pt [myspell-dictionary]20091013-12
Versions of packages thunderbird suggests:
ii apparmor 2.12-5
ii fonts-lyx 2.3.0-2
ii libgssapi-krb5-2 1.16-2
-- no debconf information
Bug#854980: kwin-x11: In multisession (all graphical) w/ desktop effects, kwin tends to crash sessions randomly on nvidia hardware
* Nuno Oliveira [2018-03-05 21:54]: Hi, I also get random crashes of kwin-x11 with the nvidia binary driver. They appear easily (but not always) when using qupzilla for web browsing, mostly when new pages are opened in new windows. Installed versions are: host:~# apt-cache policy kwin-x11 nvidia-driver-bin kwin-x11: Instalado: 4:5.12.1-1 Candidato: 4:5.12.1-1 Tabela de Versão: *** 4:5.12.1-1 700 700 https://ftp.eq.uc.pt/software/unix/Linux/debian testing/main amd64 Packages 650 https://ftp.eq.uc.pt/software/unix/Linux/debian unstable/main amd64 Packages 100 /var/lib/dpkg/status 4:5.8.6-1 600 600 https://ftp.eq.uc.pt/software/unix/Linux/debian stable/main amd64 Packages nvidia-driver-bin: Instalado: 384.111-4 Candidato: 384.111-4 Tabela de Versão: 390.25-1 300 300 https://ftp.eq.uc.pt/software/unix/Linux/debian experimental/non-free amd64 Packages *** 384.111-4 700 700 https://ftp.eq.uc.pt/software/unix/Linux/debian testing/non-free amd64 Packages 650 https://ftp.eq.uc.pt/software/unix/Linux/debian unstable/non-free amd64 Packages 100 /var/lib/dpkg/status 375.82-1~deb9u1 600 600 https://ftp.eq.uc.pt/software/unix/Linux/debian stable/non-free amd64 Packages I believe this behaviour also occurred with the previous kwin-x11 package version. On machines with the intel video driver, I have not observed any crashes. Regards, Nuno. I also get lots of messages like this: mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:12 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:13 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c03e syscall=273 compat=0 mar 05 22:45:13 host audit[23243]: SECCOMP auid=1000 uid=1000 gid=1000 ses=297 pid=23243 comm="QtWebEngineProc" exe="/usr/lib/x86_64-linux-gnu/qt5/libexec/QtWebEngineProcess" sig=0 arch=c0
Bug#854980: kwin-x11: In multisession (all graphical) w/ desktop effects, kwin tends to crash sessions randomly on nvidia hardware
Hi, I also get random crashes of kwin-x11 with the nvidia binary driver. They appear easily (but not always) when using qupzilla for web browsing, mostly when new pages are opened in new windows. Installed versions are: host:~# apt-cache policy kwin-x11 nvidia-driver-bin kwin-x11: Instalado: 4:5.12.1-1 Candidato: 4:5.12.1-1 Tabela de Versão: *** 4:5.12.1-1 700 700 https://ftp.eq.uc.pt/software/unix/Linux/debian testing/main amd64 Packages 650 https://ftp.eq.uc.pt/software/unix/Linux/debian unstable/main amd64 Packages 100 /var/lib/dpkg/status 4:5.8.6-1 600 600 https://ftp.eq.uc.pt/software/unix/Linux/debian stable/main amd64 Packages nvidia-driver-bin: Instalado: 384.111-4 Candidato: 384.111-4 Tabela de Versão: 390.25-1 300 300 https://ftp.eq.uc.pt/software/unix/Linux/debian experimental/non-free amd64 Packages *** 384.111-4 700 700 https://ftp.eq.uc.pt/software/unix/Linux/debian testing/non-free amd64 Packages 650 https://ftp.eq.uc.pt/software/unix/Linux/debian unstable/non-free amd64 Packages 100 /var/lib/dpkg/status 375.82-1~deb9u1 600 600 https://ftp.eq.uc.pt/software/unix/Linux/debian stable/non-free amd64 Packages I believe this behaviour also occurred with the previous kwin-x11 package version. On machines with the intel video driver, I have not observed any crashes. Regards, Nuno.
Bug#883022: [pkg-ntp-maintainers] Bug#883022: ntp does not start with current AppArmor profile
Hi Bernhard, * Bernhard Schmidt [2017-11-28 22:10]: Control: flags -1 + unreproducible On 28.11.2017 22:26, Nuno Oliveira wrote: Hello Nuno, Package: ntp Version: 1:4.2.8p10+dfsg-5 Severity: important Dear Maintainer, With the current apparmor profile, the ntp daemon does not start. The log is: type=SERVICE_STOP msg=audit(1511903874.826:12511): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1511903874.837:12512): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/sbin/" pid=27228 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=SYSCALL msg=audit(1511903874.837:12512): arch=c03e syscall=2 success=no exit=-13 a0=7ffd1600eaa0 a1=90800 a2=7ffd1600eab0 a3=0 items=0 ppid=1 pid=27228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" key=(null) type=PROCTITLE msg=audit(1511903874.837:12512): proctitle=2F7573722F7362696E2F6E747064002D70002F7661722F72756E2F6E7470642E706964002D67002D75003130373A313234 type=AVC msg=audit(1511903874.837:12513): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/bin/" pid=27228 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=SYSCALL msg=audit(1511903874.837:12513): arch=c03e syscall=2 success=no exit=-13 a0=7ffd1600eaa0 a1=90800 a2=7ffd1600eaaf a3=0 items=0 ppid=1 pid=27228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" key=(null) type=PROCTITLE msg=audit(1511903874.837:12513): proctitle=2F7573722F7362696E2F6E747064002D70002F7661722F72756E2F6E7470642E706964002D67002D75003130373A313234 type=SERVICE_START msg=audit(1511903874.842:12514): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' I can confirm the apparmor denials, however I cannot reproduce startup errors caused by this. root@debiantesting:~# dmesg | grep ntp [0.004000] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes) [2.340760] audit: type=1400 audit(1511906730.152:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=356 comm="apparmor_parser" [2.430519] audit: type=1400 audit(1511906730.241:6): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/sbin/" pid=396 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [2.430521] audit: type=1400 audit(1511906730.241:7): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/bin/" pid=396 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 root@debiantesting:~# pgrep -a ntp 405 /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111 ntpq> pe remote refid st t when poll reach delay offset jitter == 0.debian.pool.n .POOL. 16 p- 6400.0000.000 0.000 1.debian.pool.n .POOL. 16 p- 6400.0000.000 0.000 2.debian.pool.n .POOL. 16 p- 6400.0000.000 0.000 3.debian.pool.n .POOL. 16 p- 6400.0000.000 0.000 stratum2-4.NTP. 129.70.130.702 u 20 643 26.691 -0.288 0.645 isis.uni-paderb .DCF.1 u 12 647 25.275 -0.395 1.016 *ntp0.rrze.uni-e .GPS.1 u 52 647 22.880 -0.537 0.433 aprs.link 192.53.103.108 2 u 51 647 18.6721.832 0.738 schubhart.de131.188.3.2222 u 66 643 18.309 -2.775 0.966 business-90-187 .PPS.1 u 62 643 30.417 -3.321 1.442 Bernhard I have 2 systems where this happens, but I also confirm that this does not happen on all systems (Debian testing) where ntp is installed. Any suggestions on how to diagnose this? Regards, Nuno.
Bug#883022: ntp does not start with current AppArmor profile
Package: ntp Version: 1:4.2.8p10+dfsg-5 Severity: important Dear Maintainer, With the current apparmor profile, the ntp daemon does not start. The log is: type=SERVICE_STOP msg=audit(1511903874.826:12511): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1511903874.837:12512): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/sbin/" pid=27228 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=SYSCALL msg=audit(1511903874.837:12512): arch=c03e syscall=2 success=no exit=-13 a0=7ffd1600eaa0 a1=90800 a2=7ffd1600eab0 a3=0 items=0 ppid=1 pid=27228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" key=(null) type=PROCTITLE msg=audit(1511903874.837:12512): proctitle=2F7573722F7362696E2F6E747064002D70002F7661722F72756E2F6E7470642E706964002D67002D75003130373A313234 type=AVC msg=audit(1511903874.837:12513): apparmor="DENIED" operation="open" profile="/usr/sbin/ntpd" name="/usr/local/bin/" pid=27228 comm="ntpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=SYSCALL msg=audit(1511903874.837:12513): arch=c03e syscall=2 success=no exit=-13 a0=7ffd1600eaa0 a1=90800 a2=7ffd1600eaaf a3=0 items=0 ppid=1 pid=27228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" key=(null) type=PROCTITLE msg=audit(1511903874.837:12513): proctitle=2F7573722F7362696E2F6E747064002D70002F7661722F72756E2F6E7470642E706964002D67002D75003130373A313234 type=SERVICE_START msg=audit(1511903874.842:12514): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Thanks, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.13.0-1-amd64 (SMP w/12 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt_PT:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages ntp depends on: ii adduser 3.116 ii dpkg 1.19.0.4 ii init-system-helpers 1.51 ii libc62.25-2 ii libcap2 1:2.25-1.1 ii libedit2 3.1-20170329-1 ii libopts251:5.18.12-3 ii libssl1.11.1.0g-2 ii lsb-base 9.20170808 ii netbase 5.4 ii tzdata 2017c-1 Versions of packages ntp recommends: ii perl 5.26.1-2 ii sntp 1:4.2.8p10+dfsg-5 Versions of packages ntp suggests: ii ntp-doc 1:4.2.8p10+dfsg-5 -- Configuration Files: /etc/ntp.conf changed [not included] -- no debconf information -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.13.0-1-amd64 (SMP w/24 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages ntp depends on: ii adduser 3.116 ii dpkg 1.19.0.4 ii init-system-helpers 1.51 ii libc62.24-17 ii libcap2 1:2.25-1.1 ii libedit2 3.1-20170329-1 ii libopts251:5.18.12-3 ii libssl1.11.1.0g-2 ii lsb-base 9.20170808 ii netbase 5.4 ii tzdata 2017c-1 Versions of packages ntp recommends: ii perl 5.26.1-2 ii sntp 1:4.2.8p10+dfsg-5 Versions of packages ntp suggests: ii ntp-doc 1:4.2.8p10+dfsg-5 -- Configuration Files: /etc/ntp.conf changed [not included] -- no debconf information
Bug#882937: apparmor: cupsd profile blocks creation of PDF files with printer-driver-cups-pdf
* intrigeri [2017-11-28 09:18]: Control: reassign -1 cups-daemon Control: tag -1 + moreinfo Control: user pkg-apparmor-t...@lists.alioth.debian.org Control: usertags -1 + help-needed Hi, Nuno Oliveira: Enabling apparmor blocks the creation of PDF files with printer-driver-cups-pdf, since the output files are created in ~/PDF. Temporarily disabling the /etc/apparmor.d/usr.sbin.cupsd profile restores printing to pdf files. Thanks for your bug report! The usr.sbin.cupsd profile is supposed to run cups-pdf under a dedicated child profile (/usr/lib/cups/backend/cups-pdf) which does allow write access to ~/PDF, so this is a bug in the current implementation, not simply something that would have been forgotten. Could you please share the AppArmor denial logs? (https://wiki.debian.org/AppArmor/Debug) If you're not willing to do that, just let me know and I'll try to reproduce. Thanks in advance :) Cheers, -- intrigeri Sure, Here's what I got with AppArmor enabled: type=AVC msg=audit(1511871104.395:10445): apparmor="DENIED" operation="mknod" profile="/usr/lib/cups/backend/cups-pdf" name="/home/host/nuno/PDF/me_host_nuno_PDF.pdf" pid=2095 comm="gs" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000 type=SYSCALL msg=audit(1511871104.395:10445): arch=c03e syscall=2 success=no exit=-13 a0=55e0520ced08 a1=242 a2=1b6 a3=240 items=0 ppid=2094 pid=2095 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="gs" exe="/usr/bin/gs" key=(null) type=PROCTITLE msg=audit(1511871104.395:10445): proctitle=2F7573722F62696E2F6773002D71002D64436F6D7061746962696C6974794C6576656C3D312E34002D644E4F5041555345002D644241544348002D645341464552002D734445564943453D7064667772697465002D734F757470757446696C653D2F686F6D652F79756363612F6E756E6F2F5044462F6D655F79756363615F6E Thanks, Nuno.
Bug#882937: apparmor: cupsd profile blocks creation of PDF files with printer-driver-cups-pdf
Package: apparmor Version: 2.11.1-3 Severity: normal Dear Maintainer, Enabling apparmor blocks the creation of PDF files with printer-driver-cups-pdf, since the output files are created in ~/PDF. Temporarily disabling the /etc/apparmor.d/usr.sbin.cupsd profile restores printing to pdf files. Thanks, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.13.0-1-amd64 (SMP w/12 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt_PT:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.65 ii libc6 2.25-2 ii lsb-base 9.20170808 ii python33.6.3-2 apparmor recommends no packages. Versions of packages apparmor suggests: ii apparmor-profiles2.11.1-3 ii apparmor-profiles-extra 1.16 ii apparmor-utils 2.11.1-3 -- debconf information: * apparmor/homedirs: -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.13.0-1-amd64 (SMP w/24 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.65 ii libc6 2.24-17 ii lsb-base 9.20170808 ii python33.6.3-2 apparmor recommends no packages. Versions of packages apparmor suggests: ii apparmor-profiles2.11.1-3 ii apparmor-profiles-extra 1.16 ii apparmor-utils 2.11.1-3 -- debconf information: * apparmor/homedirs:
Bug#882487: thunderbird: Thunderbird won't start - not even with .thunderbird deleted
Hi Carsten, * Carsten Schoenert [2017-11-23 20:02]: Hello René, On Thu, Nov 23, 2017 at 01:44:14PM +0100, René Seindal wrote: Package: thunderbird Version: 1:52.4.0-2~exp1 Severity: important Dear Maintainer, I cannot get thunderbird to start on a fairly newly instaled debian testing laptop. On a newly booted computer: rene $ killall -1 thunderbird thunderbird: no process found rene $ killall -1 icedove icedove: no process found rene $ rm -r .thunderbird rene $ thunderbird just gives me a dialog with the message: "Thunderbird is already running, but is not responding. To open a new window, you must first close the existing Thunderbird process, or restart your system." I have tried using an old profile, a new profile, safe mode, removing .thunderbird and .icedove totally, ... to no avail. Thunderbird won't start. I have no idea what to do next, and google doesn't help much. Starting Thunderbird with the option '--debug' gives at least some more information if something is already going wrong before Thunderbird will be called itself. No information printed, except: nuno@host:~$ thunderbird --debug [calBackendLoader] Using Thunderbird's builtin libical backend Warning: unrecognized command line flag -debug I have tried packages from stable, testing and experimental, all the same. -- System Information: ... Versions of packages thunderbird suggests: ii apparmor 2.11.1-3 pn fonts-lyx ii libgssapi-krb5-2 1.15.2-2 You have installed apparmor. Have you tried to disable the AppArmor profile for Thunderbird and check for the further existence of the issue? $ sudo aa-disable /etc/apparmor.d/usr.bin.thunderbird That does the trick.. Thunderbird now starts ok. Also I suspect then some messages about denied access by apparmor. $ sudo journalctl -kaf --no-hostname | grep -w 'apparmor="DENIED"' No output here. Thanks, Nuno.
Bug#882487: thunderbird: Thunderbird won't start - not even with .thunderbird deleted
Hi René, I found the same problem with Debian / testing. However starting with an empty user account, this problem is gone. I've also tested with the Lightning extension present, and it works. So probably some interaction with other older user configuration files somewhere. Regards, Nuno.
Bug#880880: apt-transport-https: Update for compatibility with latest apt
Package: apt-transport-https Version: 1.5 Severity: important Dear Maintainer, Please update apt-transport-https to be compatible with the latest apt 1.6~alpha3. Thanks, Nuno. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (700, 'testing'), (650, 'unstable'), (600, 'stable'), (300, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.13.0-1-amd64 (SMP w/12 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8), LANGUAGE=pt_PT:pt_BR:en (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-transport-https depends on: ii apt 1.5 ii libapt-pkg5.01.6~alpha3 ii libc62.24-17 ii libcurl3-gnutls 7.56.1-1 ii libgcc1 1:7.2.0-12 ii libstdc++6 7.2.0-12 Versions of packages apt-transport-https recommends: ii ca-certificates 20170717 apt-transport-https suggests no packages. -- no debconf information
Bug#783123: Any solution to this?
On Wed, 24 Jun 2015 01:21:24 -0700 (PDT) hacke...@gmail.com wrote: Any solution to this? Same problem here, on Debian testing. Not sure it this is related to this: https://issues.asterisk.org/jira/browse/ASTERISK-24111 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#778724: suricata: Missing threshold.config, dns-events.rules files in 2.0.6
Package: suricata Version: 2.0.6-2 Severity: important In this version, these files seem to be missing from the instalation: /etc/suricata/threshold.config /etc/rules/dns-events.rules Suricata complains at startup (log). These files are in the source package, however. Thanks. -- System Information: Debian Release: 8.0 APT prefers testing APT policy: (700, 'testing'), (650, 'stable'), (600, 'unstable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages suricata depends on: ii libc62.19-13 ii libcap-ng0 0.7.4-2 ii libgcrypt20 1.6.2-4+b1 ii libgnutls-deb0-283.3.8-5 ii libjansson4 2.7-1 ii libluajit-5.1-2 2.0.3+dfsg-3 ii libmagic11:5.20-2 ii libnet1 1.1.6+dfsg-3 ii libnetfilter-queue1 1.0.2-2 ii libnfnetlink01.0.1-3 ii libnspr4 2:4.10.7-1 ii libnss3 2:3.17.2-1.1 ii libpcap0.8 1.6.2-2 ii libpcre3 2:8.35-3.3 ii libprelude2 1.0.0-11.4 ii libyaml-0-2 0.1.6-3 ii python 2.7.8-3 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages suricata recommends: ii oinkmaster 2.0-4 ii snort-rules-default 2.9.2.2-3 suricata suggests no packages. -- Configuration Files: /etc/default/suricata changed [not included] /etc/init.d/suricata changed [not included] /etc/suricata/suricata-debian.yaml changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#739548: vsftpd: PAM audit_log_acct_message() failed: Operation not permitted
Package: vsftpd Version: 3.0.2-3 Severity: grave Justification: renders package unusable Dear Maintainer, vsftpd on testing does not allow regular users to login; anonymous login is still OK. The message on /var/log/auth.log is: vsftpd: PAM audit_log_acct_message() failed: Operation not permitted -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (700, 'testing'), (650, 'stable'), (600, 'unstable'), (300, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores) Locale: LANG=pt_PT.UTF8, LC_CTYPE=pt_PT.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to pt_PT.UTF8) Shell: /bin/sh linked to /bin/dash Versions of packages vsftpd depends on: ii adduser3.113+nmu3 ii debconf [debconf-2.0] 1.5.52 ii libc6 2.17-97 ii libcap21:2.22-1.2 ii libpam-modules 1.1.8-2 ii libpam0g 1.1.8-2 ii libssl1.0.01.0.1f-1 ii libwrap0 7.6.q-25 ii netbase5.2 Versions of packages vsftpd recommends: ii logrotate 3.8.7-1 vsftpd suggests no packages. -- Configuration Files: /etc/vsftpd.conf changed: listen=YES anonymous_enable=YES local_enable=YES write_enable=YES local_umask=022 dirmessage_enable=YES use_localtime=YES xferlog_enable=YES connect_from_port_20=YES secure_chroot_dir=/var/run/vsftpd/empty pam_service_name=vsftpd rsa_cert_file=/etc/ssl/private/vsftpd.pem -- debconf information: * vsftpd/username: ftp * vsftpd/directory: /srv/ftp -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
