Your message dated Mon, 14 Mar 2011 21:37:41 +0000
with message-id <[email protected]>
and subject line Bug#614210: fixed in libvirt 0.8.8-3
has caused the Debian Bug report #614210,
regarding /var/run permissions depend on umask
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
614210: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614210
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libvirt-bin
Version: 0.8.7-3
Severity: normal
My umask is 077. If I start libvirtd with that, the directories and
sockets in /var/run/libvirt won't be accessible.
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.37-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libvirt-bin depends on:
ii adduser 3.112+nmu2 add and remove users and groups
ii gettext-base 0.18.1.1-3 GNU Internationalization utilities
ii libavahi-client3 0.6.28-3 Avahi client library
ii libavahi-common3 0.6.28-3 Avahi common library
ii libblkid1 2.17.2-9.1 block device id library
ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib
ii libcap-ng0 0.6.5-1 An alternate POSIX capabilities li
ii libdevmapper1.02.1 2:1.02.48-5 The Linux Kernel Device Mapper use
ii libgcrypt11 1.4.6-5 LGPL Crypto library - runtime libr
ii libgnutls26 2.10.4-2 the GNU TLS library - runtime libr
ii libnl1 1.1-6 library for dealing with netlink s
ii libparted0debian1 2.3-5 The GNU Parted disk partitioning s
ii libpciaccess0 0.12.1-1 Generic PCI access library for X
ii libreadline6 6.1-3 GNU readline and history libraries
ii libsasl2-2 2.1.23.dfsg1-7 Cyrus SASL - authentication abstra
ii libudev0 166-1 libudev shared library
ii libuuid1 2.17.2-9.1 Universally Unique ID library
ii libvirt0 0.8.7-3 library for interfacing with diffe
ii libxenstore3.0 4.0.1-2 Xenstore communications library fo
ii libxml2 2.7.8.dfsg-2 GNOME XML library
ii logrotate 3.7.8-6 Log rotation utility
Versions of packages libvirt-bin recommends:
ii bridge-utils 1.4-5 Utilities for configuring the Linu
ii dnsmasq-base 2.57-1 A small caching DNS proxy and DHCP
ii ebtables 2.0.9.2-2 Ethernet bridge frame table admini
ii gawk 1:3.1.7.dfsg-5 GNU awk, a pattern scanning and pr
ii iptables 1.4.10-1 administration tools for packet fi
ii libxml2-utils 2.7.8.dfsg-2 XML utilities
ii netcat-openbsd 1.89-4 TCP/IP swiss army knife
ii qemu-kvm 0.12.5+dfsg-5 Full virtualization on x86 hardwar
Versions of packages libvirt-bin suggests:
pn policykit-1 <none> (no description available)
-- Configuration Files:
/etc/default/libvirt-guests changed [not included]
/etc/libvirt/libvirtd.conf changed [not included]
/etc/libvirt/qemu/networks/default.xml changed [not included]
-- no debconf information
--
.''`. martin f. krafft <[email protected]> Related projects:
: :' : proud Debian developer http://debiansystem.info
`. `'` http://people.debian.org/~madduck http://vcs-pkg.org
`- Debian - when you have better things to do than fixing systems
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
--- End Message ---
--- Begin Message ---
Source: libvirt
Source-Version: 0.8.8-3
We believe that the bug you reported is fixed in the latest version of
libvirt, which is due to be installed in the Debian FTP archive:
libvirt-bin_0.8.8-3_i386.deb
to main/libv/libvirt/libvirt-bin_0.8.8-3_i386.deb
libvirt-dev_0.8.8-3_i386.deb
to main/libv/libvirt/libvirt-dev_0.8.8-3_i386.deb
libvirt-doc_0.8.8-3_all.deb
to main/libv/libvirt/libvirt-doc_0.8.8-3_all.deb
libvirt0-dbg_0.8.8-3_i386.deb
to main/libv/libvirt/libvirt0-dbg_0.8.8-3_i386.deb
libvirt0_0.8.8-3_i386.deb
to main/libv/libvirt/libvirt0_0.8.8-3_i386.deb
libvirt_0.8.8-3.debian.tar.gz
to main/libv/libvirt/libvirt_0.8.8-3.debian.tar.gz
libvirt_0.8.8-3.dsc
to main/libv/libvirt/libvirt_0.8.8-3.dsc
python-libvirt_0.8.8-3_i386.deb
to main/libv/libvirt/python-libvirt_0.8.8-3_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guido Günther <[email protected]> (supplier of updated libvirt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 14 Mar 2011 20:06:57 +0100
Source: libvirt
Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev python-libvirt
Architecture: source all i386
Version: 0.8.8-3
Distribution: unstable
Urgency: low
Maintainer: Debian Libvirt Maintainers
<[email protected]>
Changed-By: Guido Günther <[email protected]>
Description:
libvirt-bin - the programs for the libvirt library
libvirt-dev - development files for the libvirt library
libvirt-doc - documentation for the libvirt library
libvirt0 - library for interfacing with different virtualization systems
libvirt0-dbg - library for interfacing with different virtualization systems
python-libvirt - libvirt Python bindings
Closes: 614210 617773
Changes:
libvirt (0.8.8-3) unstable; urgency=low
.
* [28df435] Don't create the rundir in the init script. The daemon does this
now.
* [7302aff] New patch Make-sure-the-rundir-is-accessible-by-the-user.patch.
Make sure the rundir is accessible by the user (Closes: #614210)
* [6dde59d] Recommend dmidecode used by the qemu driver
* [235f893] Add missing checks for read only connections.
As pointed on CVE-2011-1146, some API forgot to check the read-only
status of the connection for entry point which modify the state
of the system or may lead to a remote execution using user data.
The entry points concerned are:
- virConnectDomainXMLToNative
- virNodeDeviceDettach
- virNodeDeviceReAttach
- virNodeDeviceReset
- virDomainRevertToSnapshot
- virDomainSnapshotDelete
src/libvirt.c: fix the above set of entry points to error on read-only
connections (Closes: #617773)
Checksums-Sha1:
9201b3c73ebee3ad07a0bd1d0276afafa1d8fb3d 1874 libvirt_0.8.8-3.dsc
7b7843181dd06ced8f6388b8e0fa378b0b79a8be 29942 libvirt_0.8.8-3.debian.tar.gz
a37727e7dece4a455ce4763b134a4393a71d6325 1366942 libvirt-doc_0.8.8-3_all.deb
913e3716e2e394ea3ca6d04de031207a24c419a7 1208742 libvirt-bin_0.8.8-3_i386.deb
21e4fdbde89a20be1e1388b4d12b5e0a56ad616b 1229932 libvirt0_0.8.8-3_i386.deb
1923bd44dc35f648440c3a43b1f06695e135a9c0 3792886 libvirt0-dbg_0.8.8-3_i386.deb
c5349715b8c2a98abb06d27011e73f21b53c8c2a 1500362 libvirt-dev_0.8.8-3_i386.deb
5090e9a411697219791340a50b70f4633841a0aa 584462 python-libvirt_0.8.8-3_i386.deb
Checksums-Sha256:
f9f31511926ea47ff876e03997d7eceb7b8a612ea1094a85b9ff5c6debb8aaa6 1874
libvirt_0.8.8-3.dsc
936a36ddce8321056c716f31a7e39563e348491103f73ade94d5ccf048a17189 29942
libvirt_0.8.8-3.debian.tar.gz
f8e7be8895351fbd597f7ed690e8dd73c6d576f334180a51a71e0e6dbcce1d6a 1366942
libvirt-doc_0.8.8-3_all.deb
b2d2ce9bcdb97d49c2bd4229f081c0a7379e2e8959b4f3cf6e6aa2db8e2234d5 1208742
libvirt-bin_0.8.8-3_i386.deb
4f7de634fcc5a32cf6c94770370a2eb4d40e5efb25d8c54476af8715fbbb14db 1229932
libvirt0_0.8.8-3_i386.deb
72b78297ea02ef63f4a2696d2c79d5f0afcbdf2caf7ec98c0c1c00df0850b879 3792886
libvirt0-dbg_0.8.8-3_i386.deb
9516907fa74614deaeefe3967078be650aef6f20c230d96e04f4f8a0e01271e8 1500362
libvirt-dev_0.8.8-3_i386.deb
cca96a6596ffb43ae918e882a27aecf3a38bfe4a0ea8740c0117e9d8668ccc21 584462
python-libvirt_0.8.8-3_i386.deb
Files:
516043318458e76e2a7ae7cc05ce3531 1874 libs optional libvirt_0.8.8-3.dsc
484f446bb6c3bd06da4f01df421a3929 29942 libs optional
libvirt_0.8.8-3.debian.tar.gz
3e68a355791f47f9ff5750861136419b 1366942 doc optional
libvirt-doc_0.8.8-3_all.deb
2399f3d0804da39a13ff2b9a2c8b3b67 1208742 admin optional
libvirt-bin_0.8.8-3_i386.deb
e0799933bc5b2b5a2a5f982bd9a164af 1229932 libs optional
libvirt0_0.8.8-3_i386.deb
6dbbf463ba693f97a069000845418c93 3792886 debug extra
libvirt0-dbg_0.8.8-3_i386.deb
22aa1d69b35c73aa5f6824a7b4ddba58 1500362 libdevel optional
libvirt-dev_0.8.8-3_i386.deb
69890cd625ae5ae38e6675b18d84e3d3 584462 python optional
python-libvirt_0.8.8-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFNfnngn88szT8+ZCYRAjDJAJ9hUFI+36/E02EoTPUEEPgb5xyxDQCfQDdO
IVU8Z3U/iiBIqtIj6J9hB5w=
=1zJI
-----END PGP SIGNATURE-----
--- End Message ---
