Your message dated Wed, 24 Aug 2011 21:06:24 +0000
with message-id <[email protected]>
and subject line Bug#621830: fixed in sudo 1.8.2-1
has caused the Debian Bug report #621830,
regarding Race-Condition in sudo
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
621830: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621830
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sudo
Version: 1.7.4p4-2.squeeze.2
When I invoke programs through sudo (via cgi's) the executed
programs finish sucessfully, but sudo hangs forever waiting for
something. The executed program is left in a "zombie" process state
(marked as <defunc> in the output of ps) and the sudo process never
exits - it just hang. Here is how the the process list looks like,
for example:
# ps fauxx
....
root 2560 0.0 0.0 23940 1372 ? S Apr21 0:00
/usr/bin/sudo -E /opt/xyz/etc/http/survey/cgi-bin/control.py
root 2562 0.0 0.0 0 0 ? Z Apr21 0:00 \_
[control.py] <defunct>
root 3921 0.0 0.0 23940 1372 ? S Apr21 0:00
/usr/bin/sudo -E /opt/xyz/etc/http/survey/cgi-bin/control.py
root 3923 0.0 0.0 0 0 ? Z Apr21 0:00 \_
[control.py] <defunct>
root 4174 0.0 0.0 23940 1368 ? S Apr21 0:00
/usr/bin/sudo -E /opt/xyz/etc/http/survey/cgi-bin/control.py
root 4176 0.0 0.0 0 0 ? Z Apr21 0:00 \_
[control.py] <defunct>
root 1166 0.0 0.0 23940 1372 ? S 13:08 0:00
/usr/bin/sudo -E /opt/xyz/etc/http/survey/cgi-bin/control.py
root 1167 0.0 0.0 0 0 ? Z 13:08 0:00 \_
[control.py] <defunct>
If i trace the system calls of the sudo command, i can see that sudo
waits endlessly in a select() system call which waits for file
descriptors, which are already closed and Sudo will therefore
wait forever.
This Bug only Occurs on Debian Squeeze+ (Lenny works fine)
This Bug is fixed in sudo 1.7.5 and and >1.8.0
(http://www.gratisoft.us/bugzilla/show_bug.cgi?id=447)
I am using Debian GNU/Linux 6.0, kernel 2.6.32-5-amd64 and libc6 2.11.2-10.
--- End Message ---
--- Begin Message ---
Source: sudo
Source-Version: 1.8.2-1
We believe that the bug you reported is fixed in the latest version of
sudo, which is due to be installed in the Debian FTP archive:
sudo-ldap_1.8.2-1_i386.deb
to main/s/sudo/sudo-ldap_1.8.2-1_i386.deb
sudo_1.8.2-1.debian.tar.gz
to main/s/sudo/sudo_1.8.2-1.debian.tar.gz
sudo_1.8.2-1.dsc
to main/s/sudo/sudo_1.8.2-1.dsc
sudo_1.8.2-1_i386.deb
to main/s/sudo/sudo_1.8.2-1_i386.deb
sudo_1.8.2.orig.tar.gz
to main/s/sudo/sudo_1.8.2.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bdale Garbee <[email protected]> (supplier of updated sudo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 24 Aug 2011 13:33:11 -0600
Source: sudo
Binary: sudo sudo-ldap
Architecture: source i386
Version: 1.8.2-1
Distribution: unstable
Urgency: low
Maintainer: Bdale Garbee <[email protected]>
Changed-By: Bdale Garbee <[email protected]>
Description:
sudo - Provide limited super user privileges to specific users
sudo-ldap - Provide limited super user privileges to specific users
Closes: 85123 85917 519700 607199 613639 621830 637449
Changes:
sudo (1.8.2-1) unstable; urgency=low
.
* new upstream version, closes: #637449, #621830
* include common-session in pam config, closes: #519700, #607199
* move secure_path from configure to default sudoers, closes: #85123, 85917
* improve sudoers self-documentation, closes: #613639
* drop --disable-setresuid since modern systems should not run 2.2 kernels
* lose the --with-devel configure option since it's breaking builds in
subdirectories for some reason
Checksums-Sha1:
60c84683d03db6ff81396937897b34e24f9c0864 1744 sudo_1.8.2-1.dsc
6a9400ba3e40394fd9c913219e3b6bb102bb3906 1465051 sudo_1.8.2.orig.tar.gz
56bdb6c8986e2cefcf9c6aebf2be2be8dbbac83e 20459 sudo_1.8.2-1.debian.tar.gz
25a9afeb661a1e33123a0aa925b65a47edbf6ed6 625362 sudo_1.8.2-1_i386.deb
90e40dafa97d2f1ebd823e5a266a2f7ffb89a955 653952 sudo-ldap_1.8.2-1_i386.deb
Checksums-Sha256:
991459aa3dde92832fc2971de70341d7b8ad77b5016b748adbe407991b9498ee 1744
sudo_1.8.2-1.dsc
37fe6ee670329bc45937fbe402e847f80b3a0a1c8fc9a66487e92b4b810152b0 1465051
sudo_1.8.2.orig.tar.gz
ea22418ba45e58c82a70b6405a1181853cfd4b69cf2616bb170045c68cf7d555 20459
sudo_1.8.2-1.debian.tar.gz
aec64b7b45519ab9575b9ca14c09db227ae7f87364b6c2f3282ae150b18e5800 625362
sudo_1.8.2-1_i386.deb
c5bca2aa9da602f70b5ac1666b29ab7a566f27d0d94531401361d8015b04cfe6 653952
sudo-ldap_1.8.2-1_i386.deb
Files:
9f0057cb4c5d694029726eeebd3a1775 1744 admin optional sudo_1.8.2-1.dsc
000f458e7391be9fdf459a9ad6a4912a 1465051 admin optional sudo_1.8.2.orig.tar.gz
497705ab84deb65bc460132ede656efb 20459 admin optional
sudo_1.8.2-1.debian.tar.gz
b22a010403bf97338045021c549b4f5f 625362 admin optional sudo_1.8.2-1_i386.deb
fa2a9a09c508521bd64b0aec83243bfb 653952 admin optional
sudo-ldap_1.8.2-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=zn5q
-----END PGP SIGNATURE-----
--- End Message ---
