Your message dated Mon, 28 Oct 2019 12:34:13 +0000
with message-id <[email protected]>
and subject line Bug#933761: fixed in kopanocore 8.7.0-4
has caused the Debian Bug report #933761,
regarding AppArmor configuration doesn't cover LDAP
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
933761: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933761
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: kopano-server
Version: 8.7.0-3
The default AppArmor configuration file /etc/apparmor.d/usr.sbin.kopano-server
doesn't cover the default LDAP configuration files, which are left by default
in /usr/share/kopano/ldap.*.cfg and just included from /etc/kopano/ldap.cfg
(which is the Kopano recommendation).
Adding "/usr/share/kopano/ldap.*.cfg r," to
/etc/apparmor.d/usr.sbin.kopano-server seems to help.
Error without the modified AppArmor policy:
Aug 3 01:22:19 kernel: [1053287.305384] audit: type=1400
audit(1564788139.240:75): apparmor="DENIED" operation="open"
profile="/usr/sbin/kopano-server"
name="/usr/share/kopano/ldap.active-directory.cfg" pid=25904 comm=7A2D733A20
requested_mask= "r" denied_mask="r" fsuid=110 ouid=0
Linux 4.19.0-5-amd64 #1 SMP Debian 4.19.37-5+deb10u1 (2019-07-19) x86_64
GNU/Linux
--- End Message ---
--- Begin Message ---
Source: kopanocore
Source-Version: 8.7.0-4
We believe that the bug you reported is fixed in the latest version of
kopanocore, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated kopanocore
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 26 Oct 2019 11:59:39 +0200
Source: kopanocore
Architecture: source
Version: 8.7.0-4
Distribution: unstable
Urgency: medium
Maintainer: Giraffe Maintainers
<[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Closes: 924569 931008 933759 933761 933887 934459 934460 935789 939751 941610
941999 942491
Changes:
kopanocore (8.7.0-4) unstable; urgency=medium
.
[ intrigeri ]
* [7701ce1] Fix syntax of usr.sbin.kopano-search AppArmor profile.
.
[ Roel van Meer ]
* [c6864f2] Use correct pidfile paths in sysv init scripts
( Closes: #924569)
* [d57a3c6] Use python3 to start kopano-search
* [8d862c6] Use python3 to start kopano-presence
(Closes: #942491)
* [8bce9f2] Use correct pidfile in status target of SysV init scripts
* [0a86326, e7fdb4f, 4bdc6d0, 66a4a60] rebuild patch queue from patch-queue
branch
Added patches:
Decrease-ICS-processing-batch-size.patch
server-check-for-NULL-SSL-context-before-calling-soap_ssl.patch
Patch cherry-picked from upstream
https://github.com/Kopano-dev/kopano-core/commit/eac93901
.
server-cure-use-after-free-crash-on-shutdown.patch
Patch cherry-picked from upstream
https://github.com/Kopano-dev/kopano-core/commit/e424a3f7
.
common-the-SSL-proto-list-string-is-TLSv1-not-TLSv1.0.patch
server-recognize-TLSv1.0-for-backward-compat.patch
(Upstream report: https://jira.kopano.io/browse/KC-1439)
.
# Several patches cherry-picked from ongoing Kopano development,
unfortunately there is no support by upstream due a stable release
branch.
Thus we enforced to pick up issue fixing commits. Thanks Roel for carry
on this.
gateway-avoid-uncaught-exception-when-client-disconnects-.patch
Partially-revert-libserver-implement-object-caching-by-us.patch
libserver-remove-constant-5th-argument-to-GetCell.patch
libserver-turn-GetCell-bool-params-into-a-flags-argument.patch
libserver-only-return-PT_NULL-cacheentry-info-when-so-req.patch
libserver-reduce-indent-in-SOT-QueryRowByColumn.patch
libserver-shorten-common-subexpression-with-alias-ECStore.patch
libserver-stop-caching-truncated-tproperties-data.patch
libserver-add-option-to-disable-cell-read-cache.patch
m4lcommon-have-HrGetAllProps-preserve-MAPI_W_ERRORS_RETUR.patch
m4lcommon-factor-out-HrGetAllProp-s-large-property-post-l.patch
m4lcommon-add-new-helper-for-loading-large-properties-tra.patch
treewide-read-large-properties-using-HrGetFullProp.patch
client-fix-a-comment-about-gratitious-property-sizes.patch
libserver-restore-tproperties-synchronization-for-read-fl.patch
libserver-add-missing-space-before-LOCK-SHARE.patch
dbadm-pass-shared_ptr-KDatabase-consistently.patch
dbadm-add-corrective-procedure-for-bug-KC-1444.patch
(Closes: #931008, #935789, #939751, #941610)
* [70a95ce] autopkgtests: Don't treat failing install of mariadb as failure
(Closes: #941999)
.
[ Carsten Schoenert ]
* [cc87918] apparmor kopano-server: moving include folder
(Closes: #933761)
* [e6e3419] apparmor kopano-dagent: allow access to /e/ssl/openssl.cnf
(Closes: #934459)
* [efc4ee8] apparmor kopano-search: tune existing profile more
(Closes: #934460)
* [f3e4d27] kopano-server: install also ldap.cfg
(Closes: #933759)
* [7cdad77] kopano-spamd: add missing init.d script
* [28f9b54] kopano-server: move install content of /u/libexec folder
(Closes: #933887)
* [2fbe0d4] kopano-server: install also /e/k/admin.cfg
* [cd309d4] kopano-dagent: install also /e/k/autorespond config file
* [13653d4] kopano-utils: install also /u/s/kopano-rules
* [60bd636] d/control: increase Standards-Version to 4.4.1
No further changes needed.
* [44fc261] lintian: adding additional override for kopano-server
* [efbe4aa] kopano-libs.symbols: update symbols to 8.7.0(-4)
Checksums-Sha1:
bc046256765ede68d8e501cc5b52cc07fc9aa23d 3863 kopanocore_8.7.0-4.dsc
74474c4794707342272a24c983b76e54c14cb7a4 63020 kopanocore_8.7.0-4.debian.tar.xz
f4c7a8dd39949a3bb730ae32fc9f22fc4ca21af0 18521
kopanocore_8.7.0-4_amd64.buildinfo
Checksums-Sha256:
9c444cae4af35d65b650d23aaca24a96aa8c968a9d0f08425d011df605adcfc1 3863
kopanocore_8.7.0-4.dsc
2629fd7da10c9118b6629945c70299a54255e351a28b18c0772794976860b5d3 63020
kopanocore_8.7.0-4.debian.tar.xz
f247d571fad561ae03b37825dd6d2a176e33e59bcbff345fa37f5add54d375df 18521
kopanocore_8.7.0-4_amd64.buildinfo
Files:
e8593a9871069ae16f0217ecdc155f27 3863 mail optional kopanocore_8.7.0-4.dsc
5b7251732b164dc051f8448c7e9d3718 63020 mail optional
kopanocore_8.7.0-4.debian.tar.xz
0d2cf953795d7aeffa56aa418df87f62 18521 mail optional
kopanocore_8.7.0-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Irgz
-----END PGP SIGNATURE-----
--- End Message ---
