Bug#905864: Ubuntu trusty and xenial are installed with merged-/usr by default

2018-08-10 Thread Derek Poon
Package: debootstrap
Version: 1.0.106
Tags: patch

Since debootstrap 1.0.102, merged-/usr installs are the default, except when 
installing blacklisted suites.  The blacklist was established in 
https://salsa.debian.org/installer-team/debootstrap/commit/4a1b3ca, whose 
commit message says:

Set non merged-usr release

We do not apply merged-usr until Debian stretch and Ubuntu cosmic.

However, the actual blacklist is (from scripts/gutsy):

case "$CODENAME" in

…|quantal|raring|saucy|utopic|vivid|wily|yakkety|zesty|artful|bionic|cosmic)

Note that trusty and xenial are missing.  This causes their installation to 
fail due to file conflicts in certain packages.

My speculation is that the omission was due to a copy-paste error from line 4 
of scripts/gutsy.






From: Derek Poon 
Date: Fri, 10 Aug 2018 14:47:05 -0700
Subject: [PATCH] Added trusty and xenial to merged-/usr blacklist

The blacklist should include all Ubuntu releases up to cosmic.
---
 scripts/gutsy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/gutsy b/scripts/gutsy
index b460e90..82c59c5 100644
--- a/scripts/gutsy
+++ b/scripts/gutsy
@@ -68,7 +68,7 @@ work_out_debs () {
 first_stage_install () {
case "$CODENAME" in
# "merged-usr" blacklist for past releases
-   
gutsy|hardy|intrepid|jaunty|karmic|lucid|maverick|natty|oneiric|precise|quantal|raring|saucy|utopic|vivid|wily|yakkety|zesty|artful|bionic|cosmic)
+   
gutsy|hardy|intrepid|jaunty|karmic|lucid|maverick|natty|oneiric|precise|quantal|raring|saucy|trusty|utopic|vivid|wily|xenial|yakkety|zesty|artful|bionic|cosmic)
[ -z "$MERGED_USR" ] && MERGED_USR="no"
;;
*)
-- 
2.17.1


Bug#709231: netdisco-mibs-installer: "/tmp/netdisco-mibs ... is not a root-owned directory with permissions set to 0755" even when it is

2013-05-21 Thread Derek Poon
Package: netdisco-mibs-installer
Version: 1.5
Severity: normal
Tags: upstream patch

If you run netdisco-mibs-download twice, the second run exits with
status 3 and the following error message:

/tmp/netdisco-mibs exists and is not a root-owned directory with
permissions set to 0755 (or less)

The message was introduced in the fix to #508940 (CVE-2008-5379[0]).
That patch contained some faulty bit manipulation in Perl.  In essence,
the code assumes that the following snippet outputs 0, but it doesn't:

$ perl -Mfeature=say -e 'say 0755 - "0755"'
-262

The bug is present in netdisco-mibs-installer 1.5 (squeeze) all the way
to 1.7.1 (the latest upstream release).

-- System Information:
Debian Release: 6.0.7
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages netdisco-mibs-installer depends on:
ii  libwww-perl5.836-1   Perl HTTP/WWW client/server librar
ii  perl   5.10.1-17squeeze6 Larry Wall's Practical Extraction 

netdisco-mibs-installer recommends no packages.

Versions of packages netdisco-mibs-installer suggests:
pn  netdisco-backend   (no description available)
pn  netdisco-frontend  (no description available)
--- /usr/sbin/netdisco-mibs-download2010-09-28 04:03:01.0 -0700
+++ /tmp/netdisco-mibs-download 2013-05-21 10:40:01.635530382 -0700
@@ -20,7 +20,7 @@
 if (-e $destdir) {
 my @stat = stat($destdir);
-my $mode = sprintf('%04o', $stat[2] & 0);
+my $mode = $stat[2] & 0;
 my $maxmode = 0755;
-if (! -d $destdir or $stat[4] != 0 or $maxmode - $mode) {
+if (! -d $destdir or $stat[4] != 0 or $mode & ~$maxmode) {
print "$destdir exists and is not a root-owned directory with " .
"permissions set to 0755 (or less)\n";


Bug#551919: kexec-tools postinst disregards dpkg-preconfigure

2009-10-21 Thread Derek Poon
Package: kexec-tools
Version: 20080324-2
Severity: normal

If I use dpkg-preconfigure to configure kexec not to handle reboots,
then install kexec-tools, then I expect /etc/default/kexec to contain
LOAD_KEXEC=false.  Instead, it contains LOAD_EXEC=true.

To reproduce:
1) dpkg -P kexec-tools  # Clean slate
2) dpkg-preconfigure kexec-tools# Use kexec to reboot? Say No.
3) DEBCONF_DEBUG=developer dpkg -i kexec-tools_20080324-2_$ARCH.deb
4) grep LOAD_KEXEC /etc/default/kexec   # Verify bug
5) dpkg -L kexec-tools | grep default   # See package contents

Output:
3) Selecting previously deselected package kexec-tools.
   (Reading database ... 50348 files and directories currently installed.)
   Unpacking kexec-tools (from .../kexec-tools_20080324-2_amd64.deb) ...
   Setting up kexec-tools (20080324-2) ...
   debconf (developer): frontend started
   debconf (developer): frontend running, package name is kexec-tools
   debconf (developer): starting /var/lib/dpkg/info/kexec-tools.config
   configure 
   debconf (developer): <-- SET kexec-tools/load_kexec true
   debconf (developer): --> 0 value set
   debconf (developer): <-- INPUT medium kexec-tools/load_kexec
   debconf (developer): --> 30 question skipped
   debconf (developer): <-- GO 
   debconf (developer): --> 0 ok
   debconf (developer): starting /var/lib/dpkg/info/kexec-tools.postinst
   configure 
   debconf (developer): <-- GET kexec-tools/load_kexec
   debconf (developer): --> 0 true
   debconf (developer): <-- STOP
   Processing triggers for man-db ...
4) LOAD_KEXEC=true
5) /etc/default
   /etc/default/kexec

Discussion:

I believe the problem is that the kexec-tools package contains
/etc/default/kexec as a packaged file.  This leads to the debconf
setting being clobbered when kexec-tools.config sources it immediately
after the files are unpacked.  Additionally, including
/etc/default/kexec is bad because it is redundant --
kexec-tools.postinst will generate it if it doesn't exist anyway.

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (990, 'stable')

Versions of packages kexec-tools depends on:
ii  debconf [debconf-2.0] 1.5.24 Debian configuration management sy
ii  libc6 2.7-18 GNU C Library: Shared libraries

kexec-tools recommends no packages.

kexec-tools suggests no packages.

-- debconf information:
  kexec-tools/load_kexec: false



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org