Your message dated Thu, 08 May 2014 18:33:24 +0000 with message-id <[email protected]> and subject line Bug#722946: fixed in kernel-package 13.005 has caused the Debian Bug report #722946, regarding kernel-package: corrupts module signatures due to objcopy --add-gnu-debuglink to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 722946: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722946 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: kernel-package Version: 12.036+nmu3 Severity: important /usr/share/kernel-package/ruleset/targets/image.mk does this: find $(TMPTOP)$(DEBUGDIR) -type f -name \*.ko | \ while read file; do origfile=`echo $$file | sed -e 's,$(DEBUGDIR),,g'`; echo $(OBJCOPY) --only-keep-debug $$file; $(OBJCOPY) --only-keep-debug $$file; echo $(OBJCOPY) --add-gnu-debuglink=$$file $$origfile; $(OBJCOPY) --add-gnu-debuglink=$$file $$origfile; done which corrupts module signatures. Module signatures are important, there are several rootkits that are neutralized when the kernel refuses to load unsigned modules. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh
--- End Message ---
--- Begin Message ---Source: kernel-package Source-Version: 13.005 We believe that the bug you reported is fixed in the latest version of kernel-package, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Manoj Srivastava <[email protected]> (supplier of updated kernel-package package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 May 2014 10:48:01 -0700 Source: kernel-package Binary: kernel-package Architecture: source all Version: 13.005 Distribution: unstable Urgency: low Maintainer: Manoj Srivastava <[email protected]> Changed-By: Manoj Srivastava <[email protected]> Description: kernel-package - utility for building Linux kernel related Debian packages Closes: 722946 Changes: kernel-package (13.005) unstable; urgency=low . * Normally, if the kernel configuration file enables support for modules, the kernel image package produced by kernel-package contains the modules, and the modules have a link to the location of the debugging symbols file for the mdoule, usually installed by the debug package. However, adding this link changes the signature of the module, which is not a good thing is module signing is also enabled. This version does not install the link to debug symbols if module signing is enabled in kernel configuration. Please recompile without moduile signatures in order to debug modules. (Closes: #722946). * Bug fix #722946: "corrupts module signatures due to objcopy --add-gnu-debuglink", thanks to Henrique de Moraes Holschuh Checksums-Sha1: c6c8ef7a725b469520d7f9669889bd64f1097022 1393 kernel-package_13.005.dsc eccf6423c9b18ece5e35af8077a115b50f110750 313832 kernel-package_13.005.tar.xz f804839d2bb74026a69bf4af0c66aa178ecc6c5a 378774 kernel-package_13.005_all.deb Checksums-Sha256: 5f2281148caa5f03a0643a9e32c5b5799f0dcbab5c0cef359611bdca192e40eb 1393 kernel-package_13.005.dsc 71ead7962fc7c92c06197bd721d51a3c61d088a80eb12c0677987e72cc301508 313832 kernel-package_13.005.tar.xz 1af599432dc6cfcdb782df935567862f67bab1766c5a00aa8f30ddf0f65774c1 378774 kernel-package_13.005_all.deb Files: b1de6167d6da5fe7af049702c89ab3a8 378774 kernel optional kernel-package_13.005_all.deb a039403685cb334eeea6417bab587aff 1393 kernel optional kernel-package_13.005.dsc dbea74fdae1ac94b524771bcfcdd2dda 313832 kernel optional kernel-package_13.005.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQFtBAEBCgBXBQJTa8ixUBSAAAAAABsALHNyaXZhc3RhQGdvbGRlbi1ncnlwaG9u LmNvbUFCQTcxMDI1QTFCNUE4OEE0RTVGNjhDMjM2QkQ3MjBGNkY1NzY0NzJfNzAy AAoJEDa9cg9vV2Ryux4IAJkmEt1Y8mDgOoje7u4VkKonNujrLBZyxTqmcE1JTIgr 02s/d76W9hQQbgjv5m9++ht6HI7oPpHcsEpoeYHC8zVxBqn78gohfd0eu6wUVHqE ceEP/aNC5FU5DXxzRN39NMu0XmWRQ8l6pXVlxEa8VAAoqhmLX37DzQj57WC46193 PQuOzp4cX1RInmOCUFzDRH6AUxmREaATlFMFQfzU5kfaTeu0cpL4limSzsHyTEHe sho3PO+kLXCj2b72sru9U8FL1berf8Zyla8SWw/TIdy1Gqlwapw+8SuOwpqEtzHL i2sIk88ySq1UikhMYJMr7LeUKkSdu+TZOguQ//PiIAg= =qtd7 -----END PGP SIGNATURE-----
--- End Message ---
