Your message dated Wed, 29 Apr 2020 19:04:14 +0000
with message-id <[email protected]>
and subject line Bug#954435: fixed in suricata 1:5.0.3-1
has caused the Debian Bug report #954435,
regarding suricata: PIDFile in /lib/systemd/system/suricata.service must be
moved from /var/run/ to /run/
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
954435: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954435
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: suricata
Version: 1:5.0.2-3
Severity: normal
Tags: patch
As part of the migration away from /var/run/ to /run/,
systemd produces log events containing the following.
"/lib/systemd/system/suricata.service:10: PIDFile= references a path below
legacy directory /var/run/, updating /var/run/suricata.pid → /run/suricata.pid;
please update the unit file accordingly."
Attached is a patch for /lib/systemd/system/suricata.service that moves the
PIDFile from /var/run/suricata.pid to /run/suricata.pid
This implements the recommendation from the logs and will silence
those notices from being produced in the system logs.
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 5.4.0-4-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages suricata depends on:
ii dpkg 1.19.7
ii init-system-helpers 1.57
ii libbpf0 5.4.19-1
ii libc6 2.30-2
ii libcap-ng0 0.7.9-2.1+b1
ii libevent-2.1-7 2.1.11-stable-1
ii libevent-pthreads-2.1-7 2.1.11-stable-1
ii libgcc-s1 10-20200312-2
ii libhiredis0.14 0.14.0-6
ii libhtp2 1:0.5.32-1
ii libhyperscan5 5.2.1-1
ii libjansson4 2.12-1
ii libluajit-5.1-2 2.1.0~beta3+dfsg-5.1
ii liblz4-1 1.9.2-2
ii libmagic1 1:5.38-4
ii libmaxminddb0 1.3.2-1
ii libnet1 1.1.6+dfsg-3.1
ii libnetfilter-log1 1.0.1-1.1+b1
ii libnetfilter-queue1 1.0.3-1
ii libnfnetlink0 1.0.1-3+b1
ii libnspr4 2:4.25-1
ii libnss3 2:3.49.1-1
ii libpcap0.8 1.9.1-2
ii libpcre3 2:8.39-12+b1
ii libprelude28 5.1.1-4+b1
ii libyaml-0-2 0.2.2-1
ii lsb-base 11.1.0
ii python3 3.7.5-3
ii python3-simplejson 3.16.0-2+b1
ii zlib1g 1:1.2.11.dfsg-2
Versions of packages suricata recommends:
pn snort-rules-default <none>
ii suricata-update 1.1.1-1
Versions of packages suricata suggests:
pn libtcmalloc-minimal4 <none>
-- no debconf information
--- suricata.service.old 2020-03-21 15:36:25.309491850 +0000
+++ suricata.service.new 2020-03-21 15:38:20.299404438 +0000
@@ -8,8 +8,8 @@
[Service]
Type=forking
#Environment=LD_PRELOAD=/usr/lib/libtcmalloc_minimal.so.4
-PIDFile=/var/run/suricata.pid
-ExecStart=/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml
--pidfile /var/run/suricata.pid
+PIDFile=/run/suricata.pid
+ExecStart=/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml
--pidfile /run/suricata.pid
ExecReload=/usr/bin/suricatasc -c reload-rules ; /bin/kill -HUP $MAINPID
ExecStop=/usr/bin/suricatasc -c shutdown
Restart=on-failure
--- End Message ---
--- Begin Message ---
Source: suricata
Source-Version: 1:5.0.3-1
Done: Sascha Steinbiss <[email protected]>
We believe that the bug you reported is fixed in the latest version of
suricata, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sascha Steinbiss <[email protected]> (supplier of updated suricata package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 29 Apr 2020 09:34:49 +0200
Source: suricata
Architecture: source
Version: 1:5.0.3-1
Distribution: unstable
Urgency: medium
Maintainer: Pierre Chifflier <[email protected]>
Changed-By: Sascha Steinbiss <[email protected]>
Closes: 954435
Changes:
suricata (1:5.0.3-1) unstable; urgency=medium
.
* New upstream release.
* Use /run instead of /var/run for pidfiles. Thanks to Michael Berg for the
patch.
Closes: #954435
* Bump libhtp dependency to 0.5.33.
* Remove nonexistent Files entries in d/copyright.
* Use correct DEB_LDFLAGS_MAINT_APPEND in d/rules..
Checksums-Sha1:
a11498f1f97d5f95e21e6c33edaa9a70b230879d 2921 suricata_5.0.3-1.dsc
0568a81b344df6ed3e6c92fdbb19ffa20f604184 17627300 suricata_5.0.3.orig.tar.xz
2c7a7919534fac046b2423d3788998b9f2517bd3 29760 suricata_5.0.3-1.debian.tar.xz
eefb14a374ca32c6cf67bf625ca8f74ab13ebdcd 10570 suricata_5.0.3-1_amd64.buildinfo
Checksums-Sha256:
453c7c5a4a9270df518c939178fe507e17d2091198a9b23a5aabc9f1a72a4d89 2921
suricata_5.0.3-1.dsc
e9c3a2f18d82c532b0d6b65b6570090ac4722d98cb9b115694d991ce6876efc0 17627300
suricata_5.0.3.orig.tar.xz
8d9444217fb0770d3abaaddbc1d5ae33b30efad7b7e40a4866f057e2f2c50967 29760
suricata_5.0.3-1.debian.tar.xz
43eed30be96b186fd1f837442adcc4c88298d47348cab7b1cd18ca489b8d2262 10570
suricata_5.0.3-1_amd64.buildinfo
Files:
571b83750b8df271e656f6c57e995fb8 2921 net optional suricata_5.0.3-1.dsc
a30cf3a976f1b8a29745fa904d13f55c 17627300 net optional
suricata_5.0.3.orig.tar.xz
aebb95ea8006a25f4b19bb367663c060 29760 net optional
suricata_5.0.3-1.debian.tar.xz
d03c344c94f0d13c7bc3aaadd0d4e420 10570 net optional
suricata_5.0.3-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEWzS6WqtVB+kDQm6F6NN64vCfSHIFAl6pzSwACgkQ6NN64vCf
SHKEjA//eW2C1oSlS1OS5yApBqKl4SAkBjauFsODzgG41RQy99Hvm7wnQy0tSOnR
ACPCj68236vtZrz8cSzZ+rncKzIWFjkwjke+x9vM1LqoDDRQuszgMz1lksR1OyfY
fPDvTD+3YRcHl68zQB7AkrAIn047Q0SeoV5Lnpzwxb6JKvU1/Mo5C8KdYZ4Ndlnn
Ah6/367qQKhqPNM5Ku8eWbLnMa4vBg8LkhpjB9COfqYfd3u6q6WdSYOvSSKz5G8R
PUWhezjKWQ/F/NnR86cdQB/0N2uYFgvnIxXpqVggDUfKY0ar7NhFE66cG4/r4Lm2
y3qm9taJN6L4TlA3lP2dd7je16qmL/xUZZ2JowAN2os9qdyT9OSOKC3vNxYZGf2u
0824ntPqTdX9qUpDdLQXdUdRsznXaYOe/lQP5qUbQxuod1FIVSk060UKHEdhVLKg
ehHYjKbwujdzddG4LijedOGtTtVq7L/Q6oPeumqm6JahK+cJ43U9jkUsH0mR5AZs
b/pRvkPwQCwjQpIhj6FpLpgvVbJx07dmrj2aojhlQgNqgttoTJaWbhgzZ4CEJLwi
SVGOVkDp+8z8+tv4kPQYO+BKluLTJnGnNYdQU7a2yiMy/Kb0/iLGpcxWfe+Qyk/d
/eFXsP5zJmEu6bc7QDBbc1yn7aCmChRUbZsLAYLqgQYzbF/pCEo=
=lvXJ
-----END PGP SIGNATURE-----
--- End Message ---
