Your message dated Thu, 01 Oct 2020 16:04:22 +0000
with message-id <[email protected]>
and subject line Bug#971004: fixed in sympa 6.2.40~dfsg-6
has caused the Debian Bug report #971004,
regarding start-stop-daemon: matching only on non-root pidfile
/run/sympa/archived.pid is insecure
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
971004: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971004
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sympa
Version: 6.2.40~dfsg-1
Severity: normal
Tags: patch
Dear Maintainer,
when using sysvinit, restarting sympa leaves the system with
the sympa daemons not running.
root@host:~# service sympa restart
[....] Stoping Sympa mailing list manager: archivedstart-stop-daemon: matching
only on non-root pidfile /run/sympa/archived.pid is insecure
bouncedstart-stop-daemon: matching only on non-root pidfile
/run/sympa/bounced.pid is insecure
bulkstart-stop-daemon: matching only on non-root pidfile /run/sympa/bulk.pid
is insecure
task_managerstart-stop-daemon: matching only on non-root pidfile
/run/sympa/task_manager.pid is insecure
sympa_msgstart-stop-daemon: matching only on non-root pidfile
/run/sympa/sympa_msg.pid is insecure
Bug #921557 is relevant here.
Attached is a patch to fix this.
Best regards, Roel
-- System Information:
Debian Release: 10.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-10-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
-- debconf information excluded
diff -pru a/sympa.init b/sympa.init
--- a/sympa.init 2020-09-26 08:05:48.164515651 +0200
+++ b/sympa.init 2020-09-26 08:11:00.340165016 +0200
@@ -112,6 +112,7 @@ stop_sympa() {
for daemon in $(reverse_order "$DAEMONS") ; do
log_progress_msg "$daemon"
start-stop-daemon --stop --quiet --retry 5 \
+ --user "${USER}" \
--pidfile "${RUNDIR}/${daemon}.pid" || ERRORS="$ERRORS $daemon"
# It may happened that some processes are not tracked with
pidfiles.
# For example, with the parameter 'distribution_mode fork' used by
--- End Message ---
--- Begin Message ---
Source: sympa
Source-Version: 6.2.40~dfsg-6
Done: Stefan Hornburg (Racke) <[email protected]>
We believe that the bug you reported is fixed in the latest version of
sympa, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stefan Hornburg (Racke) <[email protected]> (supplier of updated sympa package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 01 Oct 2020 17:03:14 +0200
Source: sympa
Architecture: source
Version: 6.2.40~dfsg-6
Distribution: unstable
Urgency: medium
Maintainer: Debian Sympa team <[email protected]>
Changed-By: Stefan Hornburg (Racke) <[email protected]>
Closes: 971004
Changes:
sympa (6.2.40~dfsg-6) unstable; urgency=medium
.
* Fix matching only on non-root pidfile /run/sympa/archived.pid is insecure
(Closes: #971004).
* Convert German PO file to UTF-8.
* Remove Jonas Smedegaard from uploaders.
Checksums-Sha1:
53ed8faf89a87ce40ab6cd8ecb89f4b1103afb1a 2499 sympa_6.2.40~dfsg-6.dsc
6f557ac7966f26c059f38f315d8d26ab0c86e63a 166716
sympa_6.2.40~dfsg-6.debian.tar.xz
3871f3e600b2a69dc068790c29e4139ba0353b65 14529
sympa_6.2.40~dfsg-6_amd64.buildinfo
Checksums-Sha256:
34e19c97dfc36c13b117ce5b9003abf4d1d45a262b62b04fde3732f7c9ca8f19 2499
sympa_6.2.40~dfsg-6.dsc
968b28721fa9b8de579d9db0cae358f5431caefeb159a7a0b3ef9be8338d621d 166716
sympa_6.2.40~dfsg-6.debian.tar.xz
cdb42409d17f10f44f5057edc75e2802be37598fb00b5e6afb1fda56bafb3e27 14529
sympa_6.2.40~dfsg-6_amd64.buildinfo
Files:
a7f1ef00df3de32e175fd0774f04264e 2499 mail optional sympa_6.2.40~dfsg-6.dsc
747e1f14cabec9f35d2a1eb71a4b6588 166716 mail optional
sympa_6.2.40~dfsg-6.debian.tar.xz
b3dbbb3efd8a3d7d73b699b7e1dbe8d6 14529 mail optional
sympa_6.2.40~dfsg-6_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=DAcF
-----END PGP SIGNATURE-----
--- End Message ---