Your message dated Sun, 01 Nov 2009 00:13:08 +0000
with message-id <[email protected]>
and subject line Bug#511502: fixed in smart-notifier 0.28-2
has caused the Debian Bug report #511502,
regarding smart-notifier: diff for NMU version 0.28-1.1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
511502: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511502
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: smart-notifier
Version: 0.28-1
Severity: normal
Tags: patch
Dear maintainer,
I've prepared an NMU for smart-notifier (versioned as 0.28-1.1) and uploaded it
to unstable. My changes are also available from:
git://git.debian.org/git/users/smcv/nmu/smart-notifier.git
Regards,
Simon
diffstat for smart-notifier_0.28-1 smart-notifier_0.28-1.1
config/smart-notifier.conf | 9 +--------
debian/changelog | 16 ++++++++++++++++
debian/control | 6 +++---
debian/rules | 14 +++++++-------
scripts/smart-notifier | 5 +----
src/smart_notifier/gui.py | 2 +-
6 files changed, 29 insertions(+), 23 deletions(-)
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/config/smart-notifier.conf
+++ smart-notifier-0.28/config/smart-notifier.conf
@@ -6,16 +6,9 @@
<!-- This configuration file specifies the required security policies
for the smart-notifier to work. -->
- <!-- Only allow root to invoke methods on the WarnUser interfaces -->
+ <!-- Only allow root to emit the signal -->
<policy user="root">
<allow own="smart_notifier.DbusService"/>
</policy>
- <!-- Any user can own the DbusService service -->
- <policy context="default">
- <allow send_interface="smart_notifier.DbusService.WarnUser"/>
- <allow receive_interface="smart_notifier.DbusService.WarnUser"
- receive_sender="smart_notifier.DbusService"/>
- </policy>
-
</busconfig>
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/src/smart_notifier/gui.py
+++ smart-notifier-0.28/src/smart_notifier/gui.py
@@ -47,6 +47,6 @@
smart_notifier.BUS.add_signal_receiver(warn_user,
signal_name='warn_user',
dbus_interface=smart_notifier.UD_INTERFACE,
- #named_service=smart_notifier.UD_SERVICE, - thiss fails
+ named_service=smart_notifier.SERVICE_NAME,
path=smart_notifier.UD_SERVICE)
gtk.main()
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/scripts/smart-notifier
+++ smart-notifier-0.28/scripts/smart-notifier
@@ -2,12 +2,9 @@
import sys
-# which python version are we using, the hash-bang abouve might be munged by setuptools
-version = '%s.%s' % (sys.version_info[0], sys.version_info[1])
-
# get a path to our private module, and make sure it overrides
# all other paths (This is probably Debian specific)
-sys.path.insert(0, '/usr/share/smart-notifier/lib/python%s' % version)
+sys.path.insert(0, '/usr/share/smart-notifier')
if '--notify' in sys.argv:
import smart_notifier
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/debian/control
+++ smart-notifier-0.28/debian/control
@@ -3,13 +3,13 @@
Priority: optional
Maintainer: Brian Sutherland <[email protected]>
Build-Depends: debhelper (>= 5.0.37.3)
-Build-Depends-Indep: python-all-dev (>= 2.3.5-11), python-central (>= 0.4.10), python-setuptools (>= 0.6b3-1)
+Build-Depends-Indep: python (>= 2.4), python-central (>= 0.4.10), python-setuptools (>= 0.6b3-1)
Standards-Version: 3.7.2
-XS-Python-Version: 2.4
+XS-Python-Version: >= 2.4
Package: smart-notifier
Architecture: all
-Depends: ${python:Depends}, dbus, python2.4-dbus, smartmontools (>= 5.33+5.34cvs20050802-2), python2.4-gtk2, python2.4-glade2
+Depends: ${python:Depends}, dbus, python-dbus, smartmontools (>= 5.33+5.34cvs20050802-2), python-gtk2, python-glade2
XB-Python-Version: ${python:Versions}
Description: graphical hard disk health status notifier
A graphical notifier for smartmontools which attempts to show messages from
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/debian/changelog
+++ smart-notifier-0.28/debian/changelog
@@ -1,3 +1,19 @@
+smart-notifier (0.28-1.1) unstable; urgency=medium
+
+ * Non-maintainer upload while dealing with D-Bus' CVE-2008-4311.
+ * Audit the D-Bus security policy file for compatibility with D-Bus versions
+ where CVE-2008-4311 has been fixed, and remove rules that appear to have
+ been cargo-culted from some other package and are likely to cause
+ unintended consequences for other packages (see freedesktop.org #18961).
+ * Only display the SMART message if it came from the part of smart_notifier
+ that only root can run, rather than allowing arbitrary local users to
+ spoof arbitrary messages from smartd. (Closes: #510709)
+ * Use the default Python version, and install version-independent modules
+ once, rather than once per supported Python version. Not RC, but I couldn't
+ bring myself to upload it without fixing this. (Closes: #507490)
+
+ -- Simon McVittie <[email protected]> Sun, 11 Jan 2009 17:21:30 +0000
+
smart-notifier (0.28-1) unstable; urgency=low
* Bump build depends on debhelper and rebuild (Closes: #383099).
only in patch2:
unchanged:
--- smart-notifier-0.28.orig/debian/rules
+++ smart-notifier-0.28/debian/rules
@@ -3,7 +3,7 @@
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
-PYVERS=$(shell pyversions -vr debian/control)
+PYVERS=$(shell pyversions -vd)
PYMOD=smart_notifier
PACKAGE=smart-notifier
DEB_UPSTREAM_VERSION=$(shell dpkg-parsechangelog \
@@ -14,7 +14,7 @@
build-python%:
dh_testdir
- python$* setup.py build
+ python setup.py build
touch $@
clean:
@@ -26,7 +26,7 @@
dh_clean
clean-python%:
- python$* setup.py clean
+ python setup.py clean
install: build
dh_testdir
@@ -43,14 +43,14 @@
debian/smart-notifier/etc/xdg/autostart/smart-notifier.desktop
install-python%:
- python$* setup.py install --no-compile --single-version-externally-managed --root=debian/$(PACKAGE)
- install -d debian/$(PACKAGE)/usr/share/smart-notifier/lib/python$*
+ python setup.py install --no-compile --single-version-externally-managed --root=debian/$(PACKAGE)
+ install -d debian/$(PACKAGE)/usr/share/smart-notifier
# Remove python and module version from .egg-info and move it to the privat modules
mv debian/$(PACKAGE)/usr/lib/python$*/site-packages/$(PYMOD)-$(DEB_UPSTREAM_VERSION)-py$*.egg-info \
- debian/$(PACKAGE)/usr/share/smart-notifier/lib/python$*/$(PYMOD).egg-info
+ debian/$(PACKAGE)/usr/share/smart-notifier/$(PYMOD).egg-info
# Move the python module to a private location
mv debian/$(PACKAGE)/usr/lib/python$*/site-packages/$(PYMOD) \
- debian/$(PACKAGE)/usr/share/smart-notifier/lib/python$*/$(PYMOD)
+ debian/$(PACKAGE)/usr/share/smart-notifier/$(PYMOD)
# Build architecture-independent files here.
binary-indep: build install
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: smart-notifier
Source-Version: 0.28-2
We believe that the bug you reported is fixed in the latest version of
smart-notifier, which is due to be installed in the Debian FTP archive:
smart-notifier_0.28-2.diff.gz
to main/s/smart-notifier/smart-notifier_0.28-2.diff.gz
smart-notifier_0.28-2.dsc
to main/s/smart-notifier/smart-notifier_0.28-2.dsc
smart-notifier_0.28-2_all.deb
to main/s/smart-notifier/smart-notifier_0.28-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Barry deFreese <[email protected]> (supplier of updated smart-notifier
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 30 Oct 2009 14:47:08 -0400
Source: smart-notifier
Binary: smart-notifier
Architecture: source all
Version: 0.28-2
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <[email protected]>
Changed-By: Barry deFreese <[email protected]>
Description:
smart-notifier - graphical hard disk health status notifier
Closes: 511502 511504 512684 550993 552914
Changes:
smart-notifier (0.28-2) unstable; urgency=low
.
* QA upload.
+ Set maintainer to Debian QA Group <[email protected]>.
* Acknowledge NMUs. (Closes: #511502).
* Fix moving of egg-info file in rules. (Closes: #552914).
* Don't capitalize false in .desktop file. (Closes: #512684, #550993).
* Remove useless cat in 60smart-notifier. (Closes: #511504).
* Don't build-dep on -1 revision.
* Add appropriate copyright holder to debian/copyright.
* Version path to GPL (GPL-2) in debian/copyright.
* Remove empty /usr/sbin dir.
* Add debian/pycompat and set to 2.
* Bump debian/compat to 5 to match debhelper build-dep.
* Bump Standards Version to 3.8.3.
Checksums-Sha1:
38fec00042d3937b41c5a969c8ada3d4b6f71724 1122 smart-notifier_0.28-2.dsc
1b2b9968feb47b6706d62b97567205fe4d84501f 3254 smart-notifier_0.28-2.diff.gz
480363e5dd72f6b4b17986f1232890b42fe1abcc 11338 smart-notifier_0.28-2_all.deb
Checksums-Sha256:
bd6dbaa277f353c2c3bb484f9f89e844ac6a6a27259795c0cfaabb3ef8fc8b14 1122
smart-notifier_0.28-2.dsc
f01f788ea46087697c5ea1082b8b326c7d21de793f93dcb3b51f20f717baaaea 3254
smart-notifier_0.28-2.diff.gz
75af76e5f940f0953f3a0bb2161eec34e86601a99dcaf61e0b69f9d2b1584d6b 11338
smart-notifier_0.28-2_all.deb
Files:
5965137d80a344250c598afabb1a95c8 1122 utils optional smart-notifier_0.28-2.dsc
6e59cb23772ce8a50bb200b18c170f4e 3254 utils optional
smart-notifier_0.28-2.diff.gz
44b74a818435db48f4f9c189344dce99 11338 utils optional
smart-notifier_0.28-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkrrQ2cACgkQ5ItltUs5T35h3gCg0+2Ay0y492BD5ukv2xa99ny7
D2YAnREh12aUXKQbZcDuYJZqETld8YUO
=ktQ+
-----END PGP SIGNATURE-----
--- End Message ---
