Your message dated Sun, 18 Jan 2026 11:49:33 +0000
with message-id <[email protected]>
and subject line Bug#1107505: fixed in slim 1.4.1-3
has caused the Debian Bug report #1107505,
regarding slim: default service breaks some root (su) functions
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1107505: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107505
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: slim
Severity: wishlist
Version: 1.4.1-2

Recent version of slim install systemd.service with limited
capabilities bounding set:

    CapabilityBoundingSet=~CAP_SYS_PTRACE

In other words, it removes CAP_SYS_PTRACE capability, that in result
breaks some root operations, when user run su in terminal emulator, eg.
i was not able to run lxc-ls -f nor lxc-info to get (autostarted)
container's IPs. Another example is hidepid option for proc, which
was applied to root (via su) too. And it doesn't matter, if su is run
with o without -l option.

It is not big problem to override that, but it took long time, until i
found what caused these problems...

I am not sure, if that is good or wrong, nor if it is expected ro not
expected setting, but i am sure that it is unexpected behavior, thus
IMO at least worth to mention in NEWS, to inform admins on upgrade.

BTW, to restore full bounding set, one can add to override:

    CapabilityBoundingSet=~

regards

-- 
Slavko
https://www.slavino.sk

--- End Message ---
--- Begin Message ---
Source: slim
Source-Version: 1.4.1-3
Done: Lorenzo Puliti <[email protected]>

We believe that the bug you reported is fixed in the latest version of
slim, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Lorenzo Puliti <[email protected]> (supplier of updated slim package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 17 Jan 2026 18:14:44 +0100
Source: slim
Architecture: source
Version: 1.4.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <[email protected]>
Changed-By: Lorenzo Puliti <[email protected]>
Closes: 1107505 1122718
Changes:
 slim (1.4.1-3) unstable; urgency=medium
 .
   [ Lorenzo Puliti ]
   * QA upload.
   * Orphan the package, set QA as maintainer
   * d/control:
      - drop redundant RRR=no
      - bump S-V to 4.7.3, drop Priority: optional
   * d/copyright:
      - update old fsf address in GPL-2+ license
      - update debian contributors and years
   * d/watch: update to v5
   * d/patches: remove hardening from systemd service (Closes: #1107505)
   * Depends: use dbus virtual packages instead of dbus.
     + Thanks to Simon McVittie <[email protected]> (Closes: #1122718)
   * update lintian overrides
   * slim.postinst: remove uneffective update-rc.d parameters (K,S)
 .
   [ Andrew Bower ]
   * Provide $x-display-manager facility (sysvinit)
      (Salsa MR #3)
Checksums-Sha1:
 7b8c628d254e3356fb9d6e6f5c69a62ee285915d 1969 slim_1.4.1-3.dsc
 6c6934110337fca0634d2a7689c4987fa8110bd8 1374452 slim_1.4.1-3.debian.tar.xz
 e0fd20eaadfbf3848019a8365e079944bc12a550 10109 slim_1.4.1-3_source.buildinfo
Checksums-Sha256:
 6d2585156ee49b6517aabeed71a73fd60caee17dc8d31f88624a2f6825c43ea4 1969 
slim_1.4.1-3.dsc
 dd65f2a3dbbbb4ff0a7cee8a4f5e77c91e997b5dfeb7ff702ce86c2009005ecf 1374452 
slim_1.4.1-3.debian.tar.xz
 100725e87444dafd2e2865ce22c9272148f790892de0ffac32af72412444e304 10109 
slim_1.4.1-3_source.buildinfo
Files:
 7bb4af567c953ff69bbdf2c568e7e1b8 1969 x11 optional slim_1.4.1-3.dsc
 fa28264c9888abc69ddb115ff22b0e26 1374452 x11 optional 
slim_1.4.1-3.debian.tar.xz
 a82b83dab47a281de1d9549e3c6b4f29 10109 x11 optional 
slim_1.4.1-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=2oja
-----END PGP SIGNATURE-----

Attachment: pgp0l_9LuDmev.pgp
Description: PGP signature


--- End Message ---

Reply via email to