Bug#575552: error: no mapping exists for `md0'

2010-03-26 Thread Russell Coker
Package: grub-common Version: 1.98-1 Severity: normal I get the following error when installing a new kernel package on a testing system. Should I add something to my device.map file? Running update-grub. Generating grub.cfg ... /usr/sbin/grub-probe: error: no mapping exists for `md0'. User post

Bug#574900: /usr/sbin/grub-probe: grub-probe should not use mdadm on /dev/mem

2010-03-21 Thread Russell Coker
Package: grub-common Version: 1.96+20080724-16 Severity: normal File: /usr/sbin/grub-probe Running update-grub. Searching for GRUB installation directory ... found: /boot/grub warning: grub-probe can't find drive for /dev/mem. grub-probe: error: /dev/mem is not a block device. I just received the

Bug#574666: #574666 duplicate of #505517 ?

2010-03-21 Thread Russell Coker
On Sun, 21 Mar 2010, "Didier 'OdyX' Raboud" wrote: > Hi Russel, > > Isn't "your" #574666 a duplicate of the previous #505517 (merged to #555985 > ) ? Yes, I didn't notice it before. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble?

Bug#574675: xen-utils-common: stop fails when some of the daemons are not running

2010-03-19 Thread Russell Coker
Package: xen-utils-common Version: 3.4.2-3 Severity: normal If one daemon is running but the others are not then the stop script will fail. It should use the pid file for each daemon and try to stop them independently. Note that the fact that Xen shouldn't get into this state is not relevant, d

Bug#574666: grub-pc: update-grub2 doesn't generate Xen entries

2010-03-19 Thread Russell Coker
Package: grub-pc Version: 1.98-1 Severity: normal -- Package-specific info: The update-grub2 command doesn't generate entries for Xen booting which load the Xek hypervisor. This makes it impractical to upgrade to grub2 at this time on systems running Xen. *** BEGIN /proc/mou

Bug#574073: kvm: No useful error message when hugepages are not available

2010-03-17 Thread Russell Coker
On Thu, 18 Mar 2010, Michael Tokarev wrote: > I see 3 issues here: > > 1) bad error message _text_. It's fixed (only partially, -- I've looked > at the thing again and see more cases where it'll throw as useful > error messages as this one -- I'll add/send more patches for this). > A

Bug#574073: kvm: No useful error message when hugepages are not available

2010-03-16 Thread Russell Coker
On Tue, 16 Mar 2010, Michael Tokarev wrote: > > Or kvm could use syslog or some other mechanism for logging such things. > > Where the error message will not be noticed either. With current > form it at least has a chance to be noticed after the guest exits. There is no requirement that an error

Bug#574073: kvm: No useful error message when hugepages are not available

2010-03-16 Thread Russell Coker
On Tue, 16 Mar 2010, Michael Tokarev wrote: > > When the path specified by -mem-path isn't writable the error message > > "mkstemp: Permission denied" is displayed on stderr - which means that it > > can't be seen until after the kvm session is ended when using the -curses > > option. > > Russell,

Bug#574073: failure mode

2010-03-15 Thread Russell Coker
I think that this particular error should result in aborting the attempt to run kvm. When I specifically instruct the program to do a particular action and it's unable to do so that's a good cause for aborting with an error. IMHO work-arounds should be implemented by humans not software. --

Bug#574073: kvm: No useful error message when hugepages are not available

2010-03-15 Thread Russell Coker
Package: kvm Version: 72+dfsg-5~lenny5 Severity: normal When the path specified by -mem-path isn't writable the error message "mkstemp: Permission denied" is displayed on stderr - which means that it can't be seen until after the kvm session is ended when using the -curses option. Also the error

Bug#574069: kvm: wish it would change it's argv[0]

2010-03-15 Thread Russell Coker
Package: kvm Version: 72+dfsg-5~lenny5 Severity: normal If you have multiple kvm virtual machines running then programs such as top(1) display them all as "kvm". It would be really handy if top could show which virtual machine is the one that is hogging the CPU. If there was an option "-name foo

Bug#574063: some possible solutions

2010-03-15 Thread Russell Coker
What I would prefer is to have it default to not operating unless KVM is available and have a command-line option to use QEMU. Having it default to the current behaviour with a command line option to force either KVM or failure would also be useful. Anything other than the current situation (si

Bug#574063: kvm: should not silently fall back to qemu unless requested

2010-03-15 Thread Russell Coker
Package: kvm Version: 72+dfsg-5~lenny5 Severity: normal If kvm is unable to access /dev/kvm (permissions problem or no device driver) then it will use QEMU at a great speed penalty. When using curses mode it seems impossible to determine whether KVM or QEMU is being used as the error message "Cou

Bug#574060: reportbug: Should make a backup/archive copy of bug reports under the user home dir

2010-03-15 Thread Russell Coker
Package: reportbug Version: 3.48 Severity: normal I believe that the default configuration of reportbug should store copies of all bug reports under ~/.reportbug/ (or something similar). With the current method of operation if there is a bug in the MTA that discards the mail then you lose the bug

Bug#573963: libyubikey0: copyright should say that it's the "new BSD license"

2010-03-15 Thread Russell Coker
Package: libyubikey0 Version: 1.5-1 Severity: normal http://code.google.com/p/yubico-c/ The above web site says that the license is "New BSD License", this fact should appear in the Debian copyright file. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#492581: linux-image-2.6.25-2-686: Does not halt an EeePC 701

2010-02-28 Thread Russell Coker
On Mon, 1 Mar 2010, Moritz Muehlenhoff wrote: > The next release of Debian (6.0, code name Squeeze) will be based > on 2.6.32. Please test the current 2.6.32 from unstable/testing and tell > us whether the problem persists. If so, we should report it upstream > to the kernel.org developers. > > Th

Bug#491021: fixing this

2010-02-21 Thread Russell Coker
I suggest that the following code be removed. There's no reason why /dev/hda and /dev/hdb should have a special status, particularly in a modern system where /dev/sda is usually the first hard disk. else if (statbuf.st_rdev == 0x0300 || statbuf.st_rdev == 0x0340) { fprin

Bug#381555: please link to the SHA1SUM and SHA1SUM.sign files

2010-02-17 Thread Russell Coker
When using http://www.debian.org/distrib/netinst I had the same issue as Florentin. Please link to the SHA1SUM and SHA1SUM.sign files. md5sum is old fashioned and can be skipped. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble?

Bug#569912: dkim-filter: Should log the selector used for DKIM checks

2010-02-14 Thread Russell Coker
Package: dkim-filter Version: 2.6.0.dfsg-1+lenny1 Severity: normal dkim-filter[1567]: 739F3180BC: key retrieval failed Due to an incorrect selector being used by the sender I was getting a lot of messages like the above but no information as to the real cause of the problem. I ended up using tcp

Bug#569554: mercurial: Should use /etc/mailname

2010-02-12 Thread Russell Coker
Package: mercurial Version: 1.0.1-5.1 Severity: normal When "hg ci" is run without the "-u" option it should take the contents of /etc/mailname (if it exists) as the domain name part of the user address. EG It should use r...@coker.com.au when I run it not r...@server.coker.com.au. Also it would

Bug#569297: selinux-policy-default: should label /lib32 instead of /lib64 on Debian

2010-02-11 Thread Russell Coker
Package: selinux-policy-default Version: 2:0.2.20091117-1 Severity: normal Fedora and some other distributions use directories /lib and /lib64 for shared objects. Debian uses /lib32 and /lib. We need to correct the file contexts. diff -ru refpolicy-0.2.20091117.old/policy/modules/system/librar

Bug#498438: Wrong SE Linux labels on some files under /var/lib/dpkg when installing conffile

2010-02-06 Thread Russell Coker
On Sat, 6 Feb 2010, Guillem Jover wrote: > Ok, so this is my basic understanding of how SE Linux works here (my > terminology might not be accurate), please correct were appropriate. > AFAICS there's at least two ways to apply a context to a file, one is > to set the current file system context fo

Bug#564164: perdition: pop_capability and imap_capability should not be synonyms

2010-02-05 Thread Russell Coker
On Sat, 6 Feb 2010, Simon Horman wrote: > POP3 capabilities can include spaces. Or more specifically > the capability may be followed by a space-delimited list of > parameters. So rather than use a space to delimit capabilities, > two spaces is used. > > So ---pop_capability "USER UIDL" works as

Bug#567591: linux-image-2.6.32-trunk-amd64: kernel package should conflict with lvm2 package from Lenny

2010-01-30 Thread Russell Coker
On Sat, 30 Jan 2010, Ben Hutchings wrote: > > When I ran "apt-get dist-upgrade" it aborted because it tried to upgrade > > udev first and the kernel wasn't new enough.  So I ran "apt-get install > > linux-image-2.6.32-trunk-amd64" which worked but then it didn't recognise > > the LVM volumes.  I h

Bug#567591: linux-image-2.6.32-trunk-amd64: kernel package should conflict with lvm2 package from Lenny

2010-01-29 Thread Russell Coker
Package: linux-image-2.6.32-trunk-amd64 Version: 2.6.32-5 Severity: normal I have just done an upgrade from Lenny to Testing. When I ran "apt-get dist-upgrade" it aborted because it tried to upgrade udev first and the kernel wasn't new enough. So I ran "apt-get install linux-image-2.6.32-trunk-a

Bug#567428: swaks: Uses excessive amounts of ram with --body -

2010-01-28 Thread Russell Coker
Package: swaks Version: 0+20061116.0-2 Severity: normal I need to test a mail server that has to support messages nearly 100M in size. So I created a 99MB test file and redirected swaks stdin from the file with the "--body -" option. This resulted in a swaks process that took over 1.6G of virtual

Bug#560633: my workaround

2010-01-18 Thread Russell Coker
I ran "cp /usr/share/libtool/config/ltmain.sh ." before building the package and it worked well. I don't know whether putting this command in the debian/rules would be the right thing to do. I'm not suggesting that the maintainer do this, merely noting it for other people like me who want to w

Bug#436119: ITA: dict-gcide

2010-01-09 Thread Russell Coker
On Wed, 16 Dec 2009, Ritesh Raj Sarraf wrote: > Sure. Looks like a good candidate to start a new project with ? > Especially since it contains more than 8 decades of data which can stand of > value even if just archived and maintained. > > Probably we just host it on alioth and let interested part

Bug#564196: udev: mount_tmpfs() should run restorecon whenever it is executable

2010-01-08 Thread Russell Coker
Package: udev Version: 149-2 Severity: normal mount_tmpfs() { if grep -E -q "^[^[:space:]]+ /dev (dev)?tmpfs" /proc/mounts; then return fi The above shell code should have the following two lines inserted before the return. With the current code if you have udev started when the tmpfs is

Bug#564164: perdition: pop_capability and imap_capability should not be synonyms

2010-01-07 Thread Russell Coker
Package: perdition Version: 1.18-2.1 Severity: normal The list of valid capabilities differs between POP and IMAP, so it doesn't make sense to use the same config option for them. Also the POP capability result returns all results on one line, which according to a brief skim read of the RFC appea

Bug#563796: watchdog: Ignoring config line: max-load-1

2010-01-05 Thread Russell Coker
Package: watchdog Version: 5.4-10 Severity: normal When watchdog is started at system boot it gives the following errors: INIT: Entering runlevel: 2 Starting watchdog keepalive daemon: Ignoring config line: max-load-1 = 24 Ignoring config line: max-load-5= 18 Ignoring c

Bug#563798: watchdog: The error message provided when the config file is not found is not useful

2010-01-05 Thread Russell Coker
Package: watchdog Version: 5.4-10 Severity: normal An error message about a file that can't be found or that the process is not permitted to open should at least contain the name of the file in question. The following patch fixes this: --- /tmp/watchdog.c 2010-01-05 12:06:04.0 +1100 +

Bug#563487: e2fsprogs: dpkg-buildpackage -j2 causes a build failure

2010-01-03 Thread Russell Coker
Package: e2fsprogs Version: 1.41.9-1 Severity: normal When I build e2fsprogs on either a Lenny system (back-porting the latest code from Unstable) or on a freshly updated Unstable system I get the following result from "dpkg-buildpackage -j2". Running dpkg-buildpackage without any options results

Bug#562780: maybe /etc/mailname is best

2009-12-27 Thread Russell Coker
For my servers that have real SSL certificates (as opposed to dummy ones for clients that don't check validity) I have a wildcard certificate for the domain. So maybe just "*.`cat /etc/mailname`" would be a reasonable option or simply the contents of /etc/mailname. Having a SSL certificate for

Bug#562780: dovecot-common can't install if hostname -f fails

2009-12-27 Thread Russell Coker
Package: dovecot-common Version: 1:1.0.15-2.3+lenny1 Severity: normal The "hostname -f" command in the postinst will fail if /etc/hosts doesn't have a line such as "127.0.1.1 lenny-smtp.example.com lenny-smtp" (where the output of "hostname" is "lenny-smtp"). Generally everything should wor

Bug#561885: perdition: SSL (port 993 and 995) connections don't timeout

2009-12-21 Thread Russell Coker
On Mon, 21 Dec 2009, Simon Horman wrote: > I'm quite happy to consider replacing openssl with GNUTLS. > Although I don't know if it would solve the problem at hand > nor how many bonus problems it might create. My past experience is that converting from OpenSSL to GNUTLS is not THAT difficult, b

Bug#561885: perdition: SSL (port 993 and 995) connections don't timeout

2009-12-20 Thread Russell Coker
On Mon, 21 Dec 2009, Simon Horman wrote: > In the case of the test that you ran above it looks like the code is > waiting forever inside the openssl call SSL_accept() which is made in > __perdition_ssl_connection(). The timeouts in perdition actually only > operate on select() and pre-date the int

Bug#561885: perdition: SSL (port 993 and 995) connections don't timeout

2009-12-20 Thread Russell Coker
Package: perdition Version: 1.17.1-2 Severity: normal I have Perdition running on an AMD64 system. Here is what happens with an idle port 110 session: # date ; telnet server0 110 ; date Sun Dec 20 23:30:34 GMT 2009 Trying 10.0.0.21... Connected to server0. Escape character is '^]'. +OK POP3 Ready

Bug#560402: sasl2-bin: saslauthd(8) should give the default values for the -s and -t parameters

2009-12-10 Thread Russell Coker
Package: sasl2-bin Version: 2.1.22.dfsg1-23+lenny1 Severity: normal The -s option specifies the size in KB. The table_size parameter is set to kilobytes * 1024/(sizeof(struct bucket) * CACHE_MAX_BUCKETS_PER). This seems likely to be kilobytes * 1024/(92*6) on a 32bit platform. So it will be 1.88

Bug#560002: nagios-nrpe-server: should set the socket to close on exec

2009-12-08 Thread Russell Coker
Package: nagios-nrpe-server Version: 2.12-1 Severity: minor When nrpe executes a child process (such as mailq) as part of it's checks the socket file handle is left open. It should set the file handle to close on exec before calling popen() and similar functions to avoid this. I will provide a p

Bug#557038: new Makefile

2009-12-06 Thread Russell Coker
I've attached a new Makefile that uses the URL Marc provided. Please consider doing something like this for Webalizer in Squeeze. webalizer.conf: webalizer.conf.base supported_domains Makefile cp webalizer.conf.base webalizer.conf for n in `cat supported_domains` ; do ( echo HideReferrer www$

Bug#557038: new google domain

2009-12-01 Thread Russell Coker
google.com.cu needs to be on the list too. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#557038: webalizer: sample configuration for google is inadequate

2009-11-18 Thread Russell Coker
Package: webalizer Version: 2.01.10-32.6 Severity: normal The sample configuration for webalizer doesn't group Google referrals and doesn't have a SearchEngine line for each Google domain. For my own configuration I've moved the main webalizer.conf file to /etc/webalizer/webalizer.conf.base and p

Bug#556648: openssh-server: internal-sftp is incompatable with SE Linux

2009-11-17 Thread Russell Coker
Package: openssh-server Version: 1:5.1p1-5 Severity: wishlist If you use the internal-sftp subsystem on a machine running SE Linux then the sftp will be run with the SE Linux context of the sshd instead of the correct context for the user. Ideally the system would reject a configuration that spec

Bug#556644: actually the patch is good

2009-11-17 Thread Russell Coker
I made a mistake in my second round of testing. The patch is good. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#556644: Sorry, that needs more testing

2009-11-17 Thread Russell Coker
The patch I just sent hides the problem but doesn't fix it properly. I'll send another shortly. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#556644: openssh-server: Patch to make chroot work with selinux

2009-11-17 Thread Russell Coker
Package: openssh-server Version: 1:5.1p1-8 Severity: important The following patch allows the chroot functionality for sftp (and probably regular logins) work with SE Linux. After chroot() is called the SE Linux context setting won't work unless /selinux and /proc are mounted in the chroot enviro

Bug#553303: openvpn: sample config files should not have ipp.txt under /etc

2009-10-29 Thread Russell Coker
Package: openvpn Version: 2.1~rc11-1 Severity: normal The sample server.conf file has the following line, this requires write access to /etc. I believe that it should use /var/run or /var/lib for this. ifconfig-pool-persist ipp.txt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.d

Bug#552611: watchdog: file handle is inherited by sendmail

2009-10-28 Thread Russell Coker
Package: watchdog Version: 5.4-10 Severity: normal The following patch sets the socket handle for raw socket access to close on exec. This means that when popen is used to spawn sendmail the sendmail process won't inherit the file handle. I don't know if this is the only file handle that might b

Bug#546272: patches

2009-10-11 Thread Russell Coker
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550583 The above bug report has a patch to fix some compile warnings. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550585 The above bug report has a patch for the FTBFS problem with the editing code. Once those are fixed there is the issue of t

Bug#504367: smfi_setconn

2009-10-08 Thread Russell Coker
The attached patch makes smfi_setconn() take a const char * parameter. -- russ...@coker.com.au http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog diff -ru sendmail-8.14.3/build-tree/sendmail-8.14.3/include/libmilter/mfapi.h sendmail-8.14.3-64/build

Bug#549309: konqueror-nsplugins: nsplugin SEGVs on all flash sites

2009-10-02 Thread Russell Coker
Package: konqueror-nsplugins Version: 4:3.5.9.dfsg.1-6 Severity: normal Sites such as http://www.nsa.gov/ cause nsplugin to crash on my system. I have gnash, gnash-common, gnash-tools, and mozilla-plugin-gnash installed. Iceweasel displays http://www.nsa.gov/ in a way that appears to be correct.

Bug#549186: S01auditd: line 47: warning: setlocale: LC_ALL: cannot change locale

2009-10-01 Thread Russell Coker
Package: auditd Version: 1.7.13-1 Severity: normal I see the following error on system boot: INIT: Entering runlevel: 2 /etc/rc2.d/S01auditd: line 47: warning: setlocale: LC_ALL: cannot change locale (en_US): No such file or directory Starting portmap daemon...Already running.. It seems that the

Bug#548838: linux-image-2.6.26-2-686: cdc_acm causes loss of keyboard access when device is removed

2009-09-28 Thread Russell Coker
Package: linux-image-2.6.26-2-686 Version: 2.6.26-19 Severity: normal I use the cdc_acm driver to access the Internet via my LG U990 Viewty mobile phone. About 50% of the time when I unplug the Viewty from the USB port (after running poff to stop using the device) the keyboard of my Thinkpad T41p

Bug#546301: strace corrupts it's own memory

2009-09-12 Thread Russell Coker
Package: strace Version: 4.5.17+cvs080723-2 Severity: normal The following is from an attempt to strace Iceweasel on AMD64. It happens about 60% of the time that I launch strace, the other 40% of runs work correctly. I am running "strace -p pid" to trace a running process. read(3, "\1\20b\200\

Bug#484852: I've seen something similar to this

2009-09-12 Thread Russell Coker
I'm running an AMD64 system that has no sound hardware. I have gnash version 0.8.4-2 installed (Lenny). A gnash process is stuck in a loop, here is some of the strace output: poll([{fd=3, events=POLLIN}], 1, 0) = 0 (Timeout) read(3, 0x1fdab74, 4096)= -1 EAGAIN (Resource temp

Bug#546272: hex-a-hop: wish there was a level editor

2009-09-11 Thread Russell Coker
Package: hex-a-hop Version: 0.0.20070315-6 Severity: wishlist I wish there was a level editor. A basic GUI that allows creating new levels would do. But ideally the user would be able to create their own game with sets of interlocked levels. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ.

Bug#546064: bzflag-client: aborts when run with no parameters

2009-09-11 Thread Russell Coker
On Fri, 11 Sep 2009, Tim Riker wrote: > Hey Russell. It's been a while. :) Yes. > Try rm -rf $HOME/.bzf > > then running again. Done that, it makes no difference at all. > Can you switch display resolutions in X? We call the xf86 interface to > get a list of display modes during startup and it

Bug#546064: bzflag-client: aborts when run with no parameters

2009-09-10 Thread Russell Coker
Package: bzflag-client Version: 2.0.13.20080902-1 Severity: normal I get the following error exit when I run "bzflag". I don't know whether there is some command-line parameter I should have given or whether it doesn't like my X server. I would be happy to provide more information if you can tel

Bug#544115: kmail: imap inbox folder should be synchronised first

2009-08-28 Thread Russell Coker
Package: kmail Version: 4:4.3.0-1 Severity: wishlist When I use ^L to recheck the mail via cached-IMAP the folders are synchronised in alphabetical order. This means that my "debian" folder is synchronised before my inbox. In most cases the user will want their inbox synchronised first, so it wo

Bug#539855: selinux-policy-default: module cvs appears to depend on module apache

2009-08-28 Thread Russell Coker
On Sat, 29 Aug 2009, Manoj Srivastava wrote: >         I take that back. I should have qualified it to say that this >  works for me, but I do have apache on this machine. I'll make sure that >  the postinst knows that the cvs module needs toload the apache module. Needing to load apache is the w

Bug#543420: upstart: SELinux support

2009-08-27 Thread Russell Coker
On Thu, 27 Aug 2009, Russell Coker wrote: > On Wed, 26 Aug 2009, Russell Coker wrote: > > On Wed, 26 Aug 2009, Michael Biebl wrote: > > > Well, ttbomk there are currently 4: minit, runit-run, upstart and > > > sysvinit. > > > > From the minit descrip

Bug#543420: upstart: SELinux support

2009-08-27 Thread Russell Coker
On Wed, 26 Aug 2009, Russell Coker wrote: > On Wed, 26 Aug 2009, Michael Biebl wrote: > > Well, ttbomk there are currently 4: minit, runit-run, upstart and > > sysvinit. > > From the minit description in unstable: > # This package is experimental and not easy to ins

Bug#543420: upstart: SELinux support

2009-08-26 Thread Russell Coker
On Thu, 27 Aug 2009, Philipp Kern wrote: > libselinux.so.1 is already included in the initramfs. That is for /lib/libdevmapper.so.1.02.1 which is used by lvm and cryptsetup. There is no benefit in having a libdevmapper linked with SE Linux support in the initramfs. Ideally we would have an alt

Bug#543420: upstart: SELinux support

2009-08-25 Thread Russell Coker
On Wed, 26 Aug 2009, Michael Biebl wrote: > Well, ttbomk there are currently 4: minit, runit-run, upstart and sysvinit. From the minit description in unstable: # This package is experimental and not easy to install and use. But even so I'm happy to write a patch for it even if hardly anyone will

Bug#543420: upstart: SELinux support

2009-08-25 Thread Russell Coker
On Wednesday 26 August 2009 05:08:09 Manoj Srivastava wrote: > > - selinux is only used a by very low percentage of our users > > But it is enabled in vompiled in by default in mainstrean > Debian, and if upstart wants to get into Debian, perhaps it should > follow Debian conventions Of

Bug#543420: upstart: SELinux support

2009-08-25 Thread Russell Coker
On Tue, 25 Aug 2009, Michael Biebl wrote: > first of all, thanks for the patches and interest you've shown so far. > > As maintainer of upstart I currently prefer the initramfs solution given > the following arguments: > > - selinux is only used a by very low percentage of our users As is Upstart

Bug#543420: upstart: SELinux support

2009-08-25 Thread Russell Coker
On Tue, 25 Aug 2009, Philipp Kern wrote: > am Tue, Aug 25, 2009 at 03:48:08PM +1000 hast du folgendes geschrieben: > > We have had init loading the policy for years, there is no problem with > > this. There is no need for a change. > > the problem is that upstart does not do this and that's what t

Bug#543419: policycoreutils: setfiles does not relabel with target=/

2009-08-25 Thread Russell Coker
On Tue, 25 Aug 2009, Philipp Kern wrote: > Hrm.  I tried again in a virtual machine and it worked.  Then I switched > the root FS to ext4 and now it's broken again.  (With 2.6.30.) > > Is that possible?  (I didn't have a look at the source yet.) There is code in there to check the type of the fil

Bug#543420: upstart: SELinux support

2009-08-24 Thread Russell Coker
On Tuesday 25 August 2009 13:51:14 Manoj Srivastava wrote: > Suse actually copies the file over into the initramfs, instead > of moving the file from /usr/sbin to /sbin; since the only place this > is even marginally useful is before init has started; init loads > selinux policy dorectly

Bug#543420: Red Hat and Ubuntu got it wrong

2009-08-24 Thread Russell Coker
http://etbe.coker.com.au/2008/07/24/se-linux-policy-loading/ I've described the issues related to init and SE Linux at the above URL. I've attached a patch for upstart to make it load the policy, this patch was written over a year ago, so some minor changes may be required. But basically the c

Bug#540739: Should allow the sysadmin to edit cron jobs for other SE Linux roles

2009-08-09 Thread Russell Coker
Package: cron Version: 3.0pl1-105 Severity: normal The "crontab -u" command allows the sysadmin to edit the crontab file for another user. If it is run as unconfined_t or sysadm_t (really the -u option shouldn't work otherwise) then there should be an option to specify a SE Linux context for the

Bug#540178: libnanohttp1: infinite loop on closed socket

2009-08-06 Thread Russell Coker
Package: libnanohttp1 Version: 1.1.0-16 Severity: normal 00:03:36.475727 read(9, ""..., 2048)= 0 00:03:36.475829 select(10, [9], NULL, NULL, {5, 0}) = 1 (in [9], left {5, 0}) 00:03:36.475944 read(9, ""..., 2048)= 0 00:03:36.476038 select(10, [9], NULL, NULL, {5, 0}) = 1 (in [9], left {5,

Bug#540043: libmilter1.0.1: wish there was support for epoll

2009-08-05 Thread Russell Coker
Package: libmilter1.0.1 Version: 8.14.3-5.2 Severity: wishlist http://lse.sourceforge.net/epoll/index.html According to the above URL epoll can give significant performance benefits over poll. It would be good if libmilter could use epoll on Linux. -- To UNSUBSCRIBE, email to debian-bugs-dis

Bug#539855: selinux-policy-default: module cvs appears to depend on module apache

2009-08-03 Thread Russell Coker
Package: selinux-policy-default Version: 2:0.0.20090629-1 Severity: normal Below are the errors I get when I try to load the latest policy on a system that is configured to have the "cvs" module but not the "apache" module. I guess that interfaces are not being used for interaction between these

Bug#538789: FTBFS: dpkg-buildpackage -j2 fails on AMD64

2009-07-26 Thread Russell Coker
Package: refpolicy Version: 0.0.20090629-1 Severity: important Justification: fails to build from source The following is the end of a "dpkg-buildpackage -j2" run on my Unstable AMD64 Xen instance (which was updated to the latest packages this morning). Immediately prior to doing that I did a buil

Bug#511181: found the problem

2009-07-26 Thread Russell Coker
btmakemetafile.bittorrent test http://www.example.com:8000 It turns out that my mistake was to use the above command instead of the below command to create the metafile. btmakemetafile.bittorrent test http://www.example.com:8000/announce I suggest that the btmakemetafile program give a warning

Bug#537517: libnanohttp1: bigger-reads.diff is buggy

2009-07-18 Thread Russell Coker
Package: libnanohttp1 Version: 1.1.0-16 Severity: normal The following patch needs to be applied to fix a bug in the bigger reads code. Without this patch there will be data loss and sometimes SEGVs. diff -ru libcsoap-1.1.0.bak/nanohttp/nanohttp-socket.c libcsoap-1.1.0/nanohttp/nanohttp-socket.c

Bug#534892: libssl0.9.8: err_fns_check() has a race if a pointer assignment is not atomic

2009-06-27 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal static void err_fns_check(void) { if (err_fns) return; CRYPTO_w_lock(CRYPTO_LOCK_ERR); if (!err_fns) err_fns = &err_defaults; CRYPTO_w_unlock(CRYPTO_LOCK_ERR); } Helgri

Bug#534889: another version of this

2009-06-27 Thread Russell Coker
EX_CLASS_ITEM *item = def_get_class(class_index); if(!item) /* error is already set */ return 0; ad->sk = NULL; CRYPTO_r_lock(CRYPTO_LOCK_EX_DATA); mx = sk_CRYPTO_EX_DATA_FUNCS_num(item->meth); We get the same issue in int_ne

Bug#534889: libssl0.9.8: int_free_ex_data() is reported as having a race condition

2009-06-27 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==6373== Possible data race during read of size 8 at 0x6d2ad28 by thread #4 ==6373==at 0x52D1242: int_free_ex_data (ex_data.c:497) ==6373==by 0x5318A9D: RSA_free (rsa_lib.c:225) ==6373==by 0x533A200: EVP_PKEY_free (p_lib.c

Bug#534706: libssl0.9.8: OPENSSL_cleanse() is reported as being thread-unsafe by helgrind

2009-06-26 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==28427== Possible data race during read of size 1 at 0x55ef868 by thread #3 ==28427==at 0x52CFC41: OPENSSL_cleanse (mem_clr.c:67) ==28427==by 0x533647F: EVP_MD_CTX_cleanup (digest.c:322) ==28427==by 0x53367AF: EVP_DigestF

Bug#534699: libssl0.9.8: likely race condition in int_new_ex_data()

2009-06-26 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==28314== Possible data race during read of size 8 at 0x6535338 by thread #3 ==28314==at 0x52D183B: int_new_ex_data (ex_data.c:410) ==28314==by 0x5318BD7: RSA_new_method (rsa_lib.c:185) ==28314==by 0x531B76C: rsa_cb (rsa_a

Bug#534687: A second version of this

2009-06-26 Thread Russell Coker
==28288== Possible data race during read of size 8 at 0x65394a0 by thread #3 ==28288==at 0x5330A66: lh_insert (lhash.c:186) ==28288==by 0x52D1367: def_get_class (ex_data.c:316) ==28288==by 0x52D180A: int_new_ex_data (ex_data.c:404) ==28288==by 0x5318BD7: RSA_new_method (rsa_lib.c:18

Bug#534695: valgrind: wish gen-suppressions was easier to use

2009-06-26 Thread Russell Coker
Package: valgrind Version: 1:3.4.1-1 Severity: normal Currently the --gen-suppressions option has possible values of "yes", "no", and "all". I believe that it would be good to have a value of "append" which when used in conjunction with the --suppressions option would cause the generated suppres

Bug#534683: libssl0.9.8: IMPL_CHECK gives a helgrind error

2009-06-26 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==27415== Possible data race during read of size 8 at 0x55ef9c8 by thread #4 ==27415==at 0x52D1046: CRYPTO_new_ex_data (ex_data.c:570) ==27415==by 0x5318BD7: RSA_new_method (rsa_lib.c:185) ==27415==by 0x531B76C: rsa_cb (r

Bug#534685: libssl0.9.8: EX_DATA_CHECK macro gives helgrind errors

2009-06-26 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==27623== Possible data race during read of size 8 at 0x55ef9d0 by thread #4 ==27623==at 0x52D12A6: def_get_class (ex_data.c:298) ==27623==by 0x52D180A: int_new_ex_data (ex_data.c:404) ==27623==by 0x5318BD7: RSA_new_method

Bug#534687: libssl0.9.8: lh_retrieve modifies global data, bug in valgrind or OpenSSL?

2009-06-26 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==27681== Possible data race during write of size 4 at 0x652e2f0 by thread #5 ==27681==at 0x5330C84: lh_retrieve (lhash.c:254) ==27681==by 0x52D12E1: def_get_class (ex_data.c:301) ==27681==by 0x52D180A: int_new_ex_data (ex

Bug#534656: libssl0.9.8: Another valgring/helgrind error Possible data race

2009-06-25 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==27060== Possible data race during read of size 8 at 0x55efc28 by thread #3 ==27060==at 0x5318A94: RSA_get_default_method (rsa_lib.c:88) ==27060==by 0x5318AEF: RSA_new_method (rsa_lib.c:139) ==27060==by 0x531B76C: rsa_cb

Bug#534534: more info

2009-06-25 Thread Russell Coker
In a quick test with Valgrind 3.3.1 (the Lenny version) the patch that I submitted with this bug report seemed to fix the problem. Now I'm testing with Valgrind 3.4.1 (backported from Unstable to Lenny) and I get error reports again even with my patch applied. So it seems that at best my patch

Bug#534534: libssl0.9.8: valgrind/helgrind reports Possible data race during write

2009-06-24 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal ==32465== Possible data race during write of size 4 at 0x55D7CE8 ==32465==at 0x52CD88D: CRYPTO_malloc (mem.c:298) ==32465==by 0x534AC75: asn1_item_ex_combine_new (tasn_new.c:191) ==32465==by 0x534E184: ASN1_item_ex_d2i (ta

Bug#534193: libstdc++6: calling erase() on a new empty string will cause a helgrind error report

2009-06-22 Thread Russell Coker
Package: libstdc++6 Version: 4.3.2-1.1 Severity: important http://etbe.coker.com.au/2009/06/22/valgrindhelgrind-and-stl-string http://gcc.gnu.org/bugzilla/show_bug.cgi?id=40518 The above GCC bug report which was created by Jonathan Wakely after reading my blog concerns a case where calling empty(

Bug#533134: a non-broken patch

2009-06-15 Thread Russell Coker
The previous patch wasn't thread-safe for one function and also wasn't written for the XPI version of strerror_r() and would therefore display "(null)" in some of the errors. The attached patch fixes these bugs. Sorry for the previous patch being crap. diff -ru libcsoap-1.1.0.old/libcsoap/soap-

Bug#533134: patch to fix this

2009-06-15 Thread Russell Coker
The attached patch fixes this problem. In this patch I removed the strerror() from the malloc() failure messages. It seems very unlikely that strerror_r() will add any useful information to a malloc() failure. However anything which uses memory has the potential to fail after malloc() failure

Bug#533134: libnanohttp1: strerror() is not thread-safe, need to use strerror_r()

2009-06-14 Thread Russell Coker
Package: libnanohttp1 Version: 1.1.0-16 Severity: important I'm marking this bug as important because it can cause unreliable operation and potentially crashes. If one thread has a network problem then other threads are likely to have the same problem at the same time and trigger a race condition

Bug#532059: [Pkg-openssl-devel] Bug#532059: libssl0.9.8: valgrind reports: Conditional jump or move depends on uninitialised value(s)

2009-06-13 Thread Russell Coker
On Sat, 6 Jun 2009, Kurt Roeckx wrote: > > Here are some valgrind warnings.  It would be good if these could be > > fixed even if they happen to be harmless so that they don't get in the > > way of debugging applications that use libdkim and libssl. I have attached the source to a dkim test progr

Bug#532059: libssl0.9.8: valgrind reports: Conditional jump or move depends on uninitialised value(s)

2009-06-05 Thread Russell Coker
Package: libssl0.9.8 Version: 0.9.8g-15+lenny1 Severity: normal Here are some valgrind warnings. It would be good if these could be fixed even if they happen to be harmless so that they don't get in the way of debugging applications that use libdkim and libssl. ==12015== Conditional jump or move

Bug#532058: Please provide a libdkim0d-dbg package

2009-06-05 Thread Russell Coker
Package: libdkim0d Version: 1:1.0.19-3 Severity: normal Please create a libdkim0d-dbg with debugging libraries for use by gdb, valgrind, etc. -- System Information: Debian Release: 5.0.1 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-1-686 (SMP

Bug#529870: linux-image-2.6.26-2-686: Kernel panic when using SE Linux

2009-05-21 Thread Russell Coker
Package: linux-image-2.6.26-2-686 Version: 2.6.26-15lenny2 Severity: important In my tests the latest 2.6 kernels for i386 (both Xen and non-Xen) and for AMD64 Xen will crash if SE Linux is enabled. The crash occurs even if SE Linux is in permissive mode, so the kernel parameter "selinux=0" is re

Bug#445849: can't seem to reproduce this

2009-05-21 Thread Russell Coker
I performed the test as described with kernel 2.6.26-1-xen-amd64 and it worked OK. I couldn't test 2.6.26-2 due to other bugs, but unless there has been a regression (which I doubt) I think that this one is fixed. -- Russell Coker http://etbe.coker.com.au/ My Blog

<    5   6   7   8   9   10   11   12   13   14   >