Package: courier-authdaemon
Version: 0.63.0-5
Severity: normal
Tags: patch
On a system using SELinux, /etc/init.d/courier-authdaemon needs to set
the file context for the /run/courier directory after creating itl
otherwise it ends up with context var_run_t instead of
courier_var_run_t.
---
On Sat Mar 10 02:45:22 2012, Russell Coker wrote:
On Sat, 10 Mar 2012, Martin Orr mar...@martinorr.name wrote:
So far as I can see, restorecon 2.1.10 exits with status 1 if it
changed the context of any files and 0 if not.
I bisected this to upstream commit 17c577ac where it appears
not, and something negative if an error occurred. But the
check for the return value being negative became a check for it being
non-zero. I will write a patch this weekend.
Best wishes,
Martin Orr
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject
).
Regards,
Martin Orr
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Package: selinux-policy-default
Version: 2:0.2.20100524-11
Severity: normal
Tags: patch
Since libc6 2.13-17 (on amd64), /lib64 is a directory instead of a
symlink so we need to move the fc for it out of the !distro_debian
block.
-- System Information:
Debian Release: wheezy/sid
APT prefers
Package: mount
Version: 2.19.1-4
Severity: normal
mount seg faults when mounting /lib/init/rw as follows:
$ mount -n -t tmpfs -o nosuid,size=5242880,mode=755 tmpfs /lib/init/rw
mount[27577]: segfault at b79000 ip 7f63c842eb20 sp 7fff63d5f998
error 6 in libc-2.13.so[7f63c83b4000+17a000]
On Thu 14 Jul 07:15:59 2011, Russell Coker wrote:
I'm working on this now.
http://userspace.selinuxproject.org/trac/browser/libselinux/src?order=datedesc=1
http://userspace.selinuxproject.org/trac/wiki/Releases
Firstly please tell me what libraries you used when testing this patch? It
seems
data that used to be in /dev/.udev.
Best wishes,
--
Martin Orr
diff -Nwaru 20100524-9/debian/changelog 20100524-9+orr/debian/changelog
--- 20100524-9/debian/changelog 2011-05-14 11:39:40.0 +0100
+++ 20100524-9+orr/debian/changelog 2011-05-14 14:35:14.396000890 +0100
@@ -1,3 +1,9
, and for /run that should not be a problem.
Best wishes,
Martin Orr
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.38.2 (SMP w/4 CPU cores
system_u:object_r:NetworkManager_var_run_t:s0 wpa_supplicant
system_u:object_r:NetworkManager_var_run_t:s0 wpa_supplicant.wlan0.pid
system_u:object_r:xdm_var_run_t:s0 xauth
system_u:object_r:xdm_var_run_t:s0 xdmctl
--
Martin Orr
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ
On Sun 15 May 15:08:29 2011, Roger Leigh wrote:
On Sun, May 15, 2011 at 01:41:41PM +0100, Roger Leigh wrote:
On Sat, May 14, 2011 at 06:44:29PM +0100, Martin Orr wrote:
Directories and symlinks created as part of the /run transition are not
labelled for SELinux. The effect is that most
On Sun 15 May 15:47:46 2011, Henrique de Moraes Holschuh wrote:
On Sat, 14 May 2011, Martin Orr wrote:
Directories and symlinks created as part of the /run transition are not
labelled for SELinux. The effect is that most services fail to start on
boot after transitioning to /run.
You need
Package: selinux-policy-default
Version: 2:0.2.20100524-9
Severity: critical
Tags: patch
Most services fail to start when booting with SELinux enabled and with
the /run directory (initscripts 2.88dsf-13.6).
A patch is attached to solve this:
1. Add file_contexts.subs_dist file, so that files in
Package: initscripts
Version: 2.88dsf-13.5
Severity: important
Tags: patch
Directories and symlinks created as part of the /run transition are not
labelled for SELinux. The effect is that most services fail to start on
boot after transitioning to /run.
You need to run restorecon after creating
and let me know if it work?
This patch works for me, and so far as I understand things it should
cover all the cases (no initrd, non-SELinux aware initrd, initrd that
loads SELinux policy) though I only tested the non-SELinux aware initrd
case.
Thanks,
Martin Orr
Index: src/init.c
With sysvinit 2.88 my SELinux policy is not loaded on boot; with
sysvinit 2.87 everything worked fine. I am running Debian; my
initramfs mounts /proc but does not know about SELinux.
Here are the two pieces of code:
Old code:
if (getenv(SELINUX_INIT) == NULL !is_selinux_enabled()) {
On Wed 5 May 20:07:23 2010, Petter Reinholdtsen wrote:
[Martin Orr]
With sysvinit 2.88dsf-2 there are no such messages and policy is
never loaded.
Hm, that is nasty. Any idea what is wrong with the relevant code in
src/init.d? The current one look like this:
The differences between
Subject: sysvinit: Does not load SELinux policy
Package: sysvinit
Version: 2.88dsf-2
Severity: important
I have a sid system with SELinux enabled (custom kernel, with an initrd).
sysvinit 2.88 from experimental does not mount /selinux or load the
SELinux policy on boot.
With sysvinit
statically to libgcrypt, I have no idea whether
this is due to a change in cryptsetup between 1.0.7-2 and 1.1.0~rc2-1,
or a change in the linked version of libgcrypt.
--
Martin Orr
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble
/pts.
I have reported the bug to the SELinxu mailing list.
Martin Orr
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.30 (SMP w/2 CPU
Upstream PyKDE 3.16.3 builds successfully with sip 4.8, so would allow this
bug to be closed.
--
Martin Orr
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
On 14/01/09 19:47, Pierre Chifflier wrote:
On Mon, Jan 12, 2009 at 05:51:58PM +, Martin Orr wrote:
If not, then do you have the xserver module loaded? (Check semodule -l)
xserver is indeed not loaded. selinux-policy-default is correcty
installed, and file is present at /usr/share
Have you fixed the problem in #501647 (i.e. is gdm labelled correctly)?
If not, then do you have the xserver module loaded? (Check semodule -l)
Best wishes,
Martin Orr
On 09/01/09 11:14, Pierre Chifflier wrote:
Hi,
I would like to help getting SELinux support in Debian (I package
ftp.ie.debian.org
1 experimentalftp.ie.debian.org
--- Package information. ---
Depends (Version) | Installed
==-+-===
debconf| 1.5.24
OR debconf-2.0|
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL
-i386 (since it doesn't do
anything there anyway). I have tested the former and it works.
Best wishes,
Martin Orr
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel
Package: initscripts
Version: 2.86.ds1-41
Severity: normal
During boot I get:
/etc/rcS.d/S36mountall-bootclean.sh: 29: /lib/init/bootclean: Permission
denied
[EMAIL PROTECTED]:~$ ls -l /lib/init/bootclean
-rw-r--r-- 1 root root 5089 2007-12-25 01:31 /lib/init/bootclean
/lib/init/bootclean needs
been uncovered by this locking change. The first
assertion failure is probably relevant:Bug
/build/buildd/glib2.0-2.13.7/gobject/gtype.c:2242: initialization assertion
failed, use IA__g_type_init() prior to this function
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
Package: libgtk2.0-0
Version: 2.11.6-1
Severity: normal
When I run oowriter with libgtk2.0-0 2.11.6-1 installed, it displays the splash
screen then hangs. CPU usage goes to 100% and a quick examination with
gdb looks like it has entered an infinite loop in g_once_init_enter_impl.
The following
On 12/07/07 22:04, Touko Korpela wrote:
Martin Orr wrote:
binutils (= 2.17cvs20070426) | 2.17.20070406cvs-2
I don't know if it makes difference but you should try to upgrade
binutils away from that version from experimental.
Nothing to do with this bug, but thanks for pointing
-20070707-1
libc6 (= 2.5-5) | 2.6-2
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
(= 2.3.5-1) | 2.6-0exp3
libselinux1(= 1.32) | 2.0.15-2
--
Martin Orr
diff -Nbaru iptables-1.3.6.0debian1/debian/control
iptables-1.3.6.0debian1.new/debian/control
--- iptables-1.3.6.0debian1/debian/control 2007-06-29 14:36:54.0
+0100
+++ iptables-1.3.6.0debian1.new
| 4.27-0.5
openbsd-inetd | 0.20050402-6
OR inet-superserver |
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
==-+-=
libc6 (= 2.3.5-1) | 2.6-0exp2
libselinux1 (= 1.32) | 2.0.15-2
libvolume-id0 (= 0.103-1) | 0.105-4
debconf (= 0.5) | 1.5.13
OR debconf-2.0|
lsb-base(= 3.0-6) | 3.1-23.1
--
Martin Orr
--- debian
===-+-
policycoreutils | 2.0.16-1
libpam-modules (= 0.77-0.se5) | 0.79-4
python | 2.4.4-6
libselinux1 (= 2.0.7) | 2.0.15-2
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe
(= 2.0.6-3) | 2.0.7-1
jed-common (= 1:0.99.19~pre89-1) | 1:0.99.19~pre89-1
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
| 1:1.0.5-3
zlib1g(= 1:1.2.1) | 1:1.2.3-15
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
fixes it.
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Package: lyx
Version: 1.5.0~beta1-2
Severity: serious
Upgrading from lyx in unstable to experimental, I get:
Preparing to replace lyx 1.4.3-3 (using .../lyx_1.5.0~beta1-2_amd64.deb) ...
Unpacking replacement lyx ...
dpkg: error processing /var/cache/apt/archives/lyx_1.5.0~beta1-2_amd64.deb
Package: mozplugger
Version: 1.8.0-1
Severity: grave
--- Please enter the report below this line. ---
Using mozplugger with iceweasel, whenever I view either a PDF or OpenOffice
document, I simply get an empty tab. I get a mozplugger-helper process
running, but no kpdf or openoffice.org. Until
application will be 64-bit values that are
padded in the upper 4 bytes)
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
On 19/03/07 21:53, Sune Vuorela wrote:
On Monday 19 March 2007, Martin Orr wrote:
When I log in to kdm, I get thrown straight back to the kdm greeter without
any error messages.
I have selinux on this box, in permissive mode. If I boot with selinux
disabled or with pam_selinux.so commented
Package: reportbug-ng
Version: 0.2007.03.17
Severity: wishlist
--- Please enter the report below this line. ---
When I start reportbug-ng, some instructions appear. The first one tells me
to enter a package name and press enter, so I do so. Immediately the rest
of the instructions disappear,
Package: kdm
Version: 4:3.5.6.dfsg.1-2
Severity: normal
--- Please enter the report below this line. ---
When I log in to kdm, I get thrown straight back to the kdm greeter without
any error messages.
I have selinux on this box, in permissive mode. If I boot with selinux
disabled or with
Package: amarok
Version: 1.4.5-3
Severity: normal
--- Please enter the report below this line. ---
amarok depends on
amarok-engines (= 1.4.5-3) | amarok-engine (= 1.4.5-3)
The second of these can never be satisfied, because amarok-engine is a
virtual package so cannot satisfy a versioned
Package: openoffice.org-style-default
Version: 2.1~rc2-1
Severity: grave
Justification: renders package uninstallable
When I try to upgrade to openoffice.org in experimental, I get
dpkg: error processing
/var/cache/apt/archives/openoffice.org-style-default_2.1~rc2-1_all.deb
(--unpack):
trying to
the
preferred family as well as the family, but without considering that the
right family name needs to be matched with the right subfamily.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
Package: conglomerate
Version: 0.9.1-2
Severity: grave
Tags: patch
conglomerate is uninstallable on amd64 following a binNMU, because it now
depends on conglomerate-common (+ 0.9.1-2+b1), but as conglomerate-common
is arch: all it is still at version 0.9.1-2.
This comes about because the code to
On 13/07/06 14:49, Max Kosmach wrote:
Package: libnet-nbname-perl
Version: 0.25-1
Severity: wishlist
Please package new version
It hase fixes handling some truncated replies
Sorry it has taken me so long to get around to this. I am working on it now.
--
Martin Orr
signature.asc
severity 380869 serious
tags 380869 + patch
thanks
Since python 2.4 is now the default version and memaid-pyqt is
uninstallable, this bug is now RC.
Here's a patch to use python-central.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
On 20/08/06 19:24, Ana Guerrero wrote:
You forgot attach the patch :)
Oops! There's really very little to be done as cdbs does all the work.
--
Martin Orr
diff -NbarU2 memaid-pyqt-0.2.5.orig/debian/control
memaid-pyqt-0.2.5/debian/control
--- memaid-pyqt-0.2.5.orig/debian/control 2006
in that the bug is not
listed as fixed in that version either; no information about that version
will be known. It is intended for fixing mistakes in the record of when a
bug was found.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
tags 344070 +patch
thanks
This seems to be the right combination of backslashes to escape single
quotes and backslashes in the user-entered site name.
--
Martin Orr
--- postinst.orig 2006-07-04 20:04:39.0 +0100
+++ postinst2006-07-04 20:07:40.0 +0100
@@ -73,5 +73,5
in Xsession returns false and bash exits due to set -e.
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Package: debfoster
Version: 2.5-6
Severity: normal
Following the debconf note about debfoster being deprecated, I tried
installing aptitude and running debfoster2aptitude, but got the following
error:
/var/lib/aptitude/pkgstates: No such file or directory at
/usr/sbin/debfoster2aptitude line 31.
Package: libmime-perl
Version: 5.419-1
Severity: normal
quoted-printable encoding of text parts is broken in MIME::Tools 5.419.
It has been fixed in version 5.420. This is particularly annoying because
amavisd-new refuses to use version 5.419 due to this bug.
-- System Information:
Debian
.
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Package: fontconfig
Version: 2.3.2-2
Severity: normal
The width of fi and fl ligatures is miscalculated when displaying
justify-aligned text in a DejaVu font in Firefox. This happens with both
DejaVu Sans and DejaVu Serif, but not with other fonts. I believe that this
is a fontconfig bug
by
either of these bugs, and it looks to me like the Mozilla headers have the
visibility of that set wrongly. But even after correcting that, you run
into the above GCC bugs so you may as well just disable the visibility pragma.)
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
as a directory, it is not replaced when you upgrade.
A look at other people who have had this problem in the past suggests that
the correct solution is to remove the directory in the preinst.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
Package: grep-dctrl
Version: 2.8
Severity: serious
Tags: experimental
Justification: Violates Policy 12.5 and 12.7
grep-dctrl has an empty /usr/share/doc/grep-dctrl directory, despite the
fact that policy says that this directory must contain copyright and
changelog files. The NEWS.Debian.gz
Package: mozplugger
Version: 1.7.1-1.1
Severity: normal
Tags: patch
mozplugger does includes a link to mozplugger.so in
/usr/lib/mozilla-firefox/plugins but not in /usr/lib/firefox/plugins, which
is now the standard directory for Firefox plugins. (Although for the time
being
doing that, but I imagine that this is because I have no packages
except k3b and dependencies installed in the chroot.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
Package: mambo
Version: 4.5.1.3-2
Severity: grave
Justification: renders package uninstallable
Mambo's postinst uses ucf, but mambo does not depend on ucf. This makes the
postinst fail if ucf is not installed.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT
Package: mambo
Version: 4.5.1.3-2
Severity: minor
When debconf prompts to enter the name for a Mambo site, there is no warning
that you should not enter a name containing apostrophes. However, if you do
so configuration.php will contain
$mosConfig_sitename = 'Martin's Mambo Test'
with the
) long otherwise.
This should perhaps be done by using a configure script or some other means
which does not require the list of 64-bit architectures to be hardcoded -
I'm not even 100% confident I've got it right as I don't know a lot about
these things.
--
Martin Orr
diff -Naru2 otp-970425.orig
Package: otp
Version: 970425-6
Severity: normal
When I run otp with no arguments or with any arguments except -u on amd64,
it either segfaults or exists with status 0 but without producing any
output. There is no discernible pattern as to which of these two occurs.
When I run it inside an i386
On 20/11/05 23:13, Alexander Schmehl wrote:
Hi Martin!
* Martin Orr [EMAIL PROTECTED] [051004 10:53]:
When I run ppracer, it segfaults after printing the license message and
grabbing control of the full screen (which leaves the X server somewhat
confused). This happens
there too. Finally if I run
it in gdb on an xterm, the screen simply goes black and I can no longer use
that X session. Running it in gdb on a VT results either in a segfault or
an X error, depending on whether I have previously run it from an xterm or
not, but does not trash the X session.
--
Martin
)
ASSERT: !name.isEmpty() in ../../../kio/kio/kdirlister.cpp (893)
ASSERT: !name.isEmpty() in ../../../kio/kio/kdirlister.cpp (893)
etc.
And finally in my main amd64 sid system, k3b works entirely correctly.
--
Martin Orr
signature.asc
Description: OpenPGP digital signature
]); i++) {
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
6.8.2.dfsg.1-7 X Window System client libraries m
ii zlib1g1:1.2.3-4 compression library - runtime
planetpenguin-racer recommends no packages.
-- no debconf information
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject
-bit-specific problem.
--
Martin Orr
On Wed, Feb 23, 2005 at 10:58:27AM +0100, Jeroen van Wolffelaar wrote:
On Wed, Feb 16, 2005 at 03:53:49PM +1000, Adam Conrad wrote:
Martin Orr said:
Could you change configure.in to have AC_PREREQ(2.50) at the top?
That's my planned fix, yes. :)
That doesn't sound to me like
tags 253108 + fixed-upstream
thanks
This patch has now been incorporated into the latest development snapshot of
Courier (0.48.2.20050215)
--
Martin Orr
Linux Administrator,
Methodist College Belfast
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble
configure script builder
ii autotools-dev20041130.2 Update infrastructure for
config.{guess,sub} fil
ii libtool 1.5.6-4 Generic library support script
--
Martin Orr
Linux Administrator,
Methodist College Belfast
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED
tags 293349 wontfix
thanks
I'm not going to seek a sponsor for this, though I will keep the packages
available on henry.methody.org. If anyone else wants to take action on
this, go ahead.
--
Martin Orr
Linux Administrator,
Methodist College Belfast
--
To UNSUBSCRIBE, email to [EMAIL
On Thu, Feb 03, 2005 at 01:23:46AM -0800, Steve Langasek wrote:
On Wed, Feb 02, 2005 at 05:01:23PM +, Martin Orr wrote:
This package is present in woody (version 1.1.6) but was removed in 2003
following maintainer inactivity, and because Steve Langasek asserted that it
was obsolete
Package: wnpp
Severity: wishlist
Owner: Martin Orr [EMAIL PROTECTED]
Package name: libpam-smb
Version : 1.9.9+2.0.0-rc6
Upstream Author : Dave Airlie [EMAIL PROTECTED]
URL : http://www.csn.ul.ie/~airlied/pam_smb/
License : GPL
Description
78 matches
Mail list logo