Your message dated Sun, 19 Jan 2025 21:19:42 +0000
with message-id <[email protected]>
and subject line Bug#1093437: fixed in gpsd 3.25-5
has caused the Debian Bug report #1093437,
regarding gpsd: /etc/gpsd/device-hook cannot be executed due to a wrong 
apparmor rule
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1093437: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1093437
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gpsd
Version: 3.25-4+b2
Severity: normal

gpsd uses the system() call to execute "/etc/gpsd/device-hook" (if it exists)
the system() calls /bin/sh to process the command, which resolves to 
/usr/bin/dash on Debian system
the /etc/apparmor.d/usr.sbin.gpsd does not contain an entry for /usr/bin/dash 
(just /bin/dash), therefore the execution fails with following error messages:

audit[857267]: AVC apparmor="DENIED" operation="exec" profile="/usr/sbin/gpsd" 
name="/usr/bin/dash" pid=857267 comm="gpsd" requested_mask="x" denied_mask="x" 
fsuid=127 ouid=0
gpsd[854708]: gpsd:INFO: running /etc/gpsd/device-hook /dev/ttyUSB1 ACTIVATE
gpsd[854708]: gpsd:INFO: /etc/gpsd/device-hook returned 127

Possible fix: add the "/usr/bin/dash rix," entry to 
/etc/apparmor.d/usr.sbin.gpsd

-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-30-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages gpsd depends on:
ii  adduser        3.137
ii  libbluetooth3  5.79-1
ii  libc6          2.40-5
ii  libdbus-1-3    1.16.0-1
ii  libgps30t64    3.25-4+b2
ii  libusb-1.0-0   2:1.0.27-1+b1
ii  netbase        6.4
ii  python3        3.12.8-1

Versions of packages gpsd recommends:
ii  gpsd-tools  3.25-4+b2
ii  udev        257.2-1

Versions of packages gpsd suggests:
pn  apparmor      <none>
ii  dbus          1.16.0-1
pn  gpsd-clients  <none>

-- Configuration Files:
/etc/default/gpsd changed [not included]

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: gpsd
Source-Version: 3.25-5
Done: Boian Bonev <[email protected]>

We believe that the bug you reported is fixed in the latest version of
gpsd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Boian Bonev <[email protected]> (supplier of updated gpsd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 19 Jan 2025 16:06:33 +0000
Source: gpsd
Architecture: source
Version: 3.25-5
Distribution: unstable
Urgency: medium
Maintainer: Boian Bonev <[email protected]>
Changed-By: Boian Bonev <[email protected]>
Closes: 1080885 1093437
Changes:
 gpsd (3.25-5) unstable; urgency=medium
 .
   * Fix apparmor profile to work on usrmerged systems too (Closes: #1093437)
   * Add build-dep on python3-setuptools (Closes: #1080885)
   * Bump standards to 4.7.0, no changes
   * Remove the unused lintian overrides
   * Update debian copyright year
Checksums-Sha1:
 97415ac6a543f361f3bd1017d626da765b6d1953 3101 gpsd_3.25-5.dsc
 1d5bef8183f88c01a5d03fb070b2bb8506357a9b 48040 gpsd_3.25-5.debian.tar.xz
 c8718212d3fecc612adf24ec764baac6c41ebe67 21042 gpsd_3.25-5_amd64.buildinfo
Checksums-Sha256:
 b7d7705473154fb08a24108475159fbb7970a175f6207c18fa7bad8a3aa361b9 3101 
gpsd_3.25-5.dsc
 70f84ab0b0f8f6bce96c4be15536fec4c050fb8167a882c04023d41bbe12d3ca 48040 
gpsd_3.25-5.debian.tar.xz
 b2b19af6f8f41e2451cf92c1f1a594b4a8f123318e86dbb6ce7178eb7de3b964 21042 
gpsd_3.25-5_amd64.buildinfo
Files:
 74e3f2886050f60e89afcb450e4a1f07 3101 misc optional gpsd_3.25-5.dsc
 171e30129c7410764e9761cc5bf84df3 48040 misc optional gpsd_3.25-5.debian.tar.xz
 2ee6a08093bef9fc9f2e617bf8164a73 21042 misc optional 
gpsd_3.25-5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEumC8IPN+WURNbSUAE2VyCRPS8i0FAmeNaTQSHGJib25ldkBp
cGFjY3QuY29tAAoJEBNlcgkT0vItDsYQAIR62gZRYlUOcF0GJ7Ybf5I1Hj5qbKJy
vCYrG+H7GxigEGNCrQOePxT1EG2UroUd2rVb/DofKAHiMud9YkaDMsY7R2n7xP7W
jWls5vXzw0p98k2Zf92BIIAUWwbVfCz5Cq6TEnoc8vFisllhFrf6Evst+UDLaW+h
Is2shhPpzTHaIOeVxqSbUnHbnXshVkS5xh9fBf++D0wT3DjmSutD11l6kyBi0djD
O/s+1swBdNmAweLUHL92UnIpUvlQmiYnHO7XONcZtbYNcpySwwJeRpQ9Ulm9ocCG
C5gTinSaLFKhuwPeK7/9s9ZPGh8OEM8uinp3/BtYNlyn2MY+HhfMMvxYOKnch83o
DUiwCqKwNH61a2iYP9xAALgLAVW+TMfneqZ4x/6O9hPvIMX7T70r/JWwjA+LSHDy
SkcsFOAfli0P/uDkQ24d0WuzPTFTbYGv6+tDtfCQVV8tVJigfYgLpEwLHWHn8Mkt
LghBWEoITb9shJPeHD2KwFqHlmY5OPAERs1YHWLUcRBgpK6HE/yFS4eETHONEEIb
CspYP80wUarbAbeJbYlBT5bZ/1I2oQBHabzTNyGMFaxNZ3K4nDuv4mQ+ucXjH03E
LsIKPkFS8y2I7tz5+VqIvgqQMXO5IItzjKQEYF0vdYMQLyCC6GLkbslB9hbOw4JW
NkiA1lkSd1l4
=xDKH
-----END PGP SIGNATURE-----

Attachment: pgpz06t_uw92I.pgp
Description: PGP signature


--- End Message ---

Reply via email to