Your message dated Thu, 19 May 2016 19:20:58 +0000
with message-id <[email protected]>
and subject line Bug#824767: fixed in ntp 1:4.2.8p7+dfsg-4
has caused the Debian Bug report #824767,
regarding The new apparmor profile includes a non-existing file, causes 
apparmor not to start
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
824767: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824767
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ntp
Version: 1:4.2.8p7+dfsg-3
Severity: important

Hi!

ntp now ships an apparmor profile, which is nice.  However, for users that
actually have apparmor enabled, this new package is causing apparmor to
fail to start:

● apparmor.service - LSB: AppArmor initialization
   Loaded: loaded (/etc/init.d/apparmor; bad; vendor preset: enabled)
   Active: failed (Result: exit-code) since Thu 2016-05-19 16:02:53 CEST;
1min 31s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 54241 ExecStop=/etc/init.d/apparmor stop (code=exited,
status=0/SUCCESS)
  Process: 54256 ExecStart=/etc/init.d/apparmor start (code=exited,
status=123)

... systemd[1]: Starting LSB: AppArmor initialization...
...  apparmor[54256]: Starting AppArmor profiles:AppArmor parser error for
/etc/apparmor.d/usr.sbin.ntpd in /etc/apparmor.d/usr.sbin.ntpd at line 81:
Could not open 'local/usr.sbin.ntpd'
...  apparmor[54256]: AppArmor parser error for
/etc/apparmor.d/usr.sbin.ntpd in /etc/apparmor.d/usr.sbin.ntpd at line 81:
Could not open 'local/usr.sbin.ntpd'
...  apparmor[54256]:  failed!
...  systemd[1]: apparmor.service: Control process exited, code=exited
status=123
...  systemd[1]: Failed to start LSB: AppArmor initialization.
...  systemd[1]: apparmor.service: Unit entered failed state.
...  systemd[1]: apparmor.service: Failed with result 'exit-code'.

This is due to the fact that /etc/apparmor.d/usr.sbin.ntpd includes
local/usr.sbin.ntpd which doesn't exist.  Other packages that ship files in
/etc/apparmor.d which include files in local, also ship the files in local:

marga:/etc/apparmor.d$ cat local/usr.bin.evince
# Site-specific additions and overrides for usr.bin.evince.
# For more details, please see /etc/apparmor.d/local/READM

marga:/etc/apparmor.d$ cat local/usr.sbin.cups-browsed
# Site-specific additions and overrides for usr.sbin.cups-browsed.
# For more details, please see /etc/apparmor.d/local/README.

This should be fixed by adding a call to dh_apparmor (see for example:
https://sources.debian.net/src/evince/3.20.0-3/debian/rules/), I think this
should do
the trick:
dh_apparmor --profile-name=usr.sbin.ntp -pntp

While this is easy to workaround by just touching the file, I don't think
it's acceptable
for ntp to break my already working apparmor installation, so this could
arguably
be severity critical with justification: makes unrelated software on the
system break.

Please fix ASAP.

Thanks.
-- 
Cheers,
Marga

--- End Message ---
--- Begin Message ---
Source: ntp
Source-Version: 1:4.2.8p7+dfsg-4

We believe that the bug you reported is fixed in the latest version of
ntp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Kurt Roeckx <[email protected]> (supplier of updated ntp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 19 May 2016 20:44:08 +0200
Source: ntp
Binary: ntp ntpdate ntp-doc
Architecture: source amd64 all
Version: 1:4.2.8p7+dfsg-4
Distribution: unstable
Urgency: high
Maintainer: Debian NTP Team <[email protected]>
Changed-By: Kurt Roeckx <[email protected]>
Description:
 ntp        - Network Time Protocol daemon and utility programs
 ntp-doc    - Network Time Protocol documentation
 ntpdate    - client for setting system time from NTP servers
Closes: 824767
Changes:
 ntp (1:4.2.8p7+dfsg-4) unstable; urgency=high
 .
   * Update apparmor-profiles-extra again now we now in which version they
     removed it.
   * Call dh_apparmor.  Add build-depends on dh-apparmor.  (Closes: #824767)
Checksums-Sha1:
 7f0c60003d9a216daf9e7f07b935942390cbfcc9 2248 ntp_4.2.8p7+dfsg-4.dsc
 31bda0a286c7ccd992b0ed4e46f19a512362d216 53692 ntp_4.2.8p7+dfsg-4.debian.tar.xz
 de97c281d676eb85a6108d0c6ee323ff381a9cf9 1501466 
ntp-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 0b9c7982f6f33721c57234e6e27ec6ae7d289e9f 1189958 ntp-doc_4.2.8p7+dfsg-4_all.deb
 7187454789de4db6a4c4a04aaef333fdf981f881 526598 ntp_4.2.8p7+dfsg-4_amd64.deb
 e4e223f76de7097c8145aa606907924eabf68b6c 145628 
ntpdate-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 0889a8cc43ec0b2bbc2dd63b16fddb3832b43cf3 70978 ntpdate_4.2.8p7+dfsg-4_amd64.deb
Checksums-Sha256:
 c9d19fb090c51b3c75db05482ed1d1fa50ea124ad8c90cd6584f2cf1c0f3a05a 2248 
ntp_4.2.8p7+dfsg-4.dsc
 d404a5a5a81741778cb16610731b626481cdc6b43111dae4f359ea2adc24270b 53692 
ntp_4.2.8p7+dfsg-4.debian.tar.xz
 599ff7abb3f78cfa3d7556f148564ab41a2ba4451f90572a1fa74bc1866ca178 1501466 
ntp-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 2245260f1af2e8b8a00d98f0dc95a471a3779a68ed5c5d5146f6bbb2f6829754 1189958 
ntp-doc_4.2.8p7+dfsg-4_all.deb
 34a885187786f5fbcd18d3193cd3cccae04ea392d5667683e759ab1422486f9c 526598 
ntp_4.2.8p7+dfsg-4_amd64.deb
 e96088ad608d38d5b7edfacff6a8d14e5bacce9d6681eb0130036ae570c87eb1 145628 
ntpdate-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 873a37be324bb24780afe7cf430c3a4a9cf257d962b5c8b83f76e1a599bfb277 70978 
ntpdate_4.2.8p7+dfsg-4_amd64.deb
Files:
 62193276c5acd20f2bae2135235fb336 2248 net optional ntp_4.2.8p7+dfsg-4.dsc
 9f6d5bccf80322273ea6ef0d73fe4c2c 53692 net optional 
ntp_4.2.8p7+dfsg-4.debian.tar.xz
 7942a08f6b2ed37bf9d930510b900b87 1501466 debug extra 
ntp-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 f97f39e14b70bab3f3863a42f9c7da35 1189958 doc optional 
ntp-doc_4.2.8p7+dfsg-4_all.deb
 652c10559d2d98afd1d26209d3ccb87c 526598 net optional 
ntp_4.2.8p7+dfsg-4_amd64.deb
 e58c6af4f01bcede212878ce90e5e550 145628 debug extra 
ntpdate-dbgsym_4.2.8p7+dfsg-4_amd64.deb
 abd48a86f23033562cce12ad8aa005b8 70978 net optional 
ntpdate_4.2.8p7+dfsg-4_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=aJQF
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to