Your message dated Tue, 27 Mar 2012 21:51:49 +0000
with message-id <[email protected]>
and subject line Bug#658358: fixed in tor 0.2.3.13-alpha-1
has caused the Debian Bug report #658358,
regarding debian-tor user has a bash shell
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
658358: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658358
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tor
Version: 0.2.2.35-1

I don't see a reason why the tor users needs bash. I suggest to change it to 
this:

diff --git a/debian/tor.postinst b/debian/tor.postinst
index de25f3f..ec5b3ab 100644
--- a/debian/tor.postinst
+++ b/debian/tor.postinst
@@ -25,7 +25,7 @@ else
                --disabled-password \
                --home /var/lib/tor \
                --no-create-home \
-               --shell /bin/bash \
+               --shell /bin/false \
                --group \
                debian-tor




--- End Message ---
--- Begin Message ---
Source: tor
Source-Version: 0.2.3.13-alpha-1

We believe that the bug you reported is fixed in the latest version of
tor, which is due to be installed in the Debian FTP archive:

tor-dbg_0.2.3.13-alpha-1_amd64.deb
  to main/t/tor/tor-dbg_0.2.3.13-alpha-1_amd64.deb
tor-geoipdb_0.2.3.13-alpha-1_all.deb
  to main/t/tor/tor-geoipdb_0.2.3.13-alpha-1_all.deb
tor_0.2.3.13-alpha-1.diff.gz
  to main/t/tor/tor_0.2.3.13-alpha-1.diff.gz
tor_0.2.3.13-alpha-1.dsc
  to main/t/tor/tor_0.2.3.13-alpha-1.dsc
tor_0.2.3.13-alpha-1_amd64.deb
  to main/t/tor/tor_0.2.3.13-alpha-1_amd64.deb
tor_0.2.3.13-alpha.orig.tar.gz
  to main/t/tor/tor_0.2.3.13-alpha.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Peter Palfrader <[email protected]> (supplier of updated tor package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 27 Mar 2012 12:35:44 UTC
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: source all amd64
Version: 0.2.3.13-alpha-1
Distribution: experimental
Urgency: low
Maintainer: Peter Palfrader <[email protected]>
Changed-By: Peter Palfrader <[email protected]>
Description: 
 tor        - anonymizing overlay network for TCP
 tor-dbg    - debugging symbols for Tor
 tor-geoipdb - geoIP database for Tor
Checksums-Sha1: 
 e34d318fe8c60a9da60c804d511b43677c18935a 1687 tor_0.2.3.13-alpha-1.dsc
 a40d00ae707e7eba5d20b3981ff1210e1e77e5e1 3088897 tor_0.2.3.13-alpha.orig.tar.gz
 a543c83369dd6b0bd9ea8d6c5bd468cb29f2838d 31484 tor_0.2.3.13-alpha-1.diff.gz
 3a858e8fae4d8311860d7032455b0a2069e917d4 1408872 
tor-geoipdb_0.2.3.13-alpha-1_all.deb
 1b0a2c6ab1380283c5b5f24dadda8c292ea16897 1133960 tor_0.2.3.13-alpha-1_amd64.deb
 d631886eeaebc9979cedc72bfc06a2edc43cca40 94162 
tor-dbg_0.2.3.13-alpha-1_amd64.deb
Checksums-Sha256: 
 888dfb73597a8f050fa3354ea60a0575ae5d8c7f53a404cc9cee5845cca4783b 1687 
tor_0.2.3.13-alpha-1.dsc
 2c4bf190ebc78861ffd89b154b2b370825fc5aa8694b59a87fd7f2f47a1345ec 3088897 
tor_0.2.3.13-alpha.orig.tar.gz
 d7800f5efd39607f4822eaf91178b91e6998201bebe29f0947bfc3ea7237e83e 31484 
tor_0.2.3.13-alpha-1.diff.gz
 6fb0f13de60d042193cadaa7be7bf5653879d1fbd81a58df023c60a5d4ff9a64 1408872 
tor-geoipdb_0.2.3.13-alpha-1_all.deb
 13a41c2c8be847bc524395564129f98cc350fdb5db342be512828261d686ba3d 1133960 
tor_0.2.3.13-alpha-1_amd64.deb
 6640de277db1191332de3ea0631accd847f46afe151d1f1063f9a1b8ed767917 94162 
tor-dbg_0.2.3.13-alpha-1_amd64.deb
Closes: 658358
Changes: 
 tor (0.2.3.13-alpha-1) experimental; urgency=low
 .
   * New upstream version.
   * When creating the debian-tor user that tor runs at, create it with
     a shell of /bin/false instead of /bin/bash.  Does not change shells
     of existing users (closes: #658358).
   * Include 45ace4844b020cb754d3bb65f1021bfeb5115f9e from master
     to fix a test suite stack overflow, just introduced.
Files: 
 1ef621666488af1a18b99fe61cf0edb8 1687 net optional tor_0.2.3.13-alpha-1.dsc
 503d7b043875e9745db7cb06a26e2c5c 3088897 net optional 
tor_0.2.3.13-alpha.orig.tar.gz
 25cc9a717b54080fc65e5b84d24b51da 31484 net optional 
tor_0.2.3.13-alpha-1.diff.gz
 0b5e046d17abfd47d28f9bd83bdbd1d6 1408872 net extra 
tor-geoipdb_0.2.3.13-alpha-1_all.deb
 379bcd03b2eece4653533b9478fbb167 1133960 net optional 
tor_0.2.3.13-alpha-1_amd64.deb
 3bc865e2b51b94ae3a75698a7eef1ab9 94162 debug extra 
tor-dbg_0.2.3.13-alpha-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJPciJOAAoJEDTSCgbh3sV37yMH/iKQ1ArG0EnlEcwHzgVuBWBe
KFLv+wuTxSEJ8hd9aDEsJZjNe9bVxrCXR/TQ8kLIklfUxLgV/ZlIdy0GmiQAj6A/
QUXkMyWdIwLQfngzjHnk2zHgIf0B0HPKfe7yCrBmzMdxlY02vt42QpBz8PzIe8PR
YpX74KEqRodtHVZRM2Lip1sbMrfQjbnUSSyGlLlfCmaMzqEWYE1H19HAapXk06PN
Zik4ThAXWY9TmXbnrbZQiFhG0FDurkUXo95rDE8E92pD7wScvAShcXpVU9wloqaY
IwHMrQE5VGJTWh1QIzznx2HMkn77KQr5aWNWtfPLaXSIBieoGJ8fxbhE8p0vVjM=
=k82c
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to