Your message dated Mon, 13 Jul 2026 14:32:06 +0000
with message-id <[email protected]>
and subject line Bug#1116595: fixed in xfsprogs 6.13.0-2+deb13u1
has caused the Debian Bug report #1116595,
regarding Packaging issue: xfs_scrub_all_fail.service NoNewPrivileges breaks
emailing reports
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1116595: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116595
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: xfsprogs
Version: 6.13.0-2+b1
Severity: important
X-Debbugs-Cc: [email protected]
I've struggled with this for a while because all my logs were spammed by
hundreds of lines of:
postfix/postdrop[37291]: warning: mail_queue_enter: create file
maildrop/480926.37291: Permission denied
And it took me a long while to dig this down to xfs_scrub reporting.
Problem setup:
- mailer is postfix, which uses a setgid /usr/sbin/postdrop binary to
write to /var/lib/postfix/maildrop (mode 0730, group postdrop)
- the systemd unit for the xfs_scrub reporting,
/usr/lib/systemd/system/xfs_scrub_all_fail.service, contains:
# xfs_scrub needs these privileges to run, and no others
CapabilityBoundingSet=
NoNewPrivileges=true
Together, this means that the script
(/usr/libexec/xfsprogs/xfs_scrub_fail) composes the email, and pipes it
to "/usr/sbin/sendmail -t -i", which in turn invokes the postdrop
binary, but which can't get the sgid bit. But since it calls sendmail
repeatedly, I get for a few days, every hour, hundreds of flagged log
entries by logcheck.
Now, the Trixie kernel seems to not support scrubbing anyway, so I can
simply disable this, but it would be better to fix this and do an update
(in trixe), otherwise the log spamming is really annoying.
Thanks!
-- System Information:
Debian Release: 13.1
APT prefers stable
APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'stable-security')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.43+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages xfsprogs depends on:
ii libblkid1 2.41-5
ii libc6 2.41-12
ii libdevmapper1.02.1 2:1.02.205-2
ii libedit2 3.1-20250104-1
ii libicu76 76.1-4
ii libinih1 59-1
ii liburcu8t64 0.15.2-2
ii libuuid1 2.41-5
ii python3 3.13.5-1
ii python3-dbus 1.4.0-1
xfsprogs recommends no packages.
Versions of packages xfsprogs suggests:
ii acl 2.3.2-2+b1
ii attr 1:2.5.2-3
ii quota 4.09-1+b1
ii xfsdump 3.2.0-2
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: xfsprogs
Source-Version: 6.13.0-2+deb13u1
Done: Bastian Germann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
xfsprogs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <[email protected]> (supplier of updated xfsprogs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 04 Mar 2026 12:28:29 +0100
Source: xfsprogs
Architecture: source
Version: 6.13.0-2+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: XFS Development Team <[email protected]>
Changed-By: Bastian Germann <[email protected]>
Closes: 1116595
Changes:
xfsprogs (6.13.0-2+deb13u1) trixie; urgency=medium
.
* xfs_scrub_fail: reduce security lockdowns to avoid postfix problems
(Closes: #1116595)
Checksums-Sha1:
02f392d1756a3c7af524b6e9b09aaab34abbe99f 2080 xfsprogs_6.13.0-2+deb13u1.dsc
31d4f7ab5d84c6322375b17b10970be649afa7a7 1506676 xfsprogs_6.13.0.orig.tar.xz
be67f479c6e94db18f2127c800dcc3d7491a3d3a 16100
xfsprogs_6.13.0-2+deb13u1.debian.tar.xz
9768ef24b97ccbfc2b1861867cbf2f1be14e6389 5863
xfsprogs_6.13.0-2+deb13u1_source.buildinfo
Checksums-Sha256:
f3137052af84bbaee33566ac47600c54db908c384b3f2d30c7d98673b9e8150f 2080
xfsprogs_6.13.0-2+deb13u1.dsc
0459933f93d94c82bc2789e7bd63742273d9d74207cdae67dc3032038da08337 1506676
xfsprogs_6.13.0.orig.tar.xz
7d68f9d00e225c7a426559995268f4d6efcc925cf7b33cb61f1dca1bb9a02d75 16100
xfsprogs_6.13.0-2+deb13u1.debian.tar.xz
fb5fd8b0e93e07e19119b7fcbd2cbf32bc58381d0ad563414acb3d0df9dc8a19 5863
xfsprogs_6.13.0-2+deb13u1_source.buildinfo
Files:
080b9023b61275658df5bc986689a1e1 2080 admin optional
xfsprogs_6.13.0-2+deb13u1.dsc
42b00213982d16c6df3fc17a0706b773 1506676 admin optional
xfsprogs_6.13.0.orig.tar.xz
c87f52c49a0322036392860d65278288 16100 admin optional
xfsprogs_6.13.0-2+deb13u1.debian.tar.xz
2b3a1dfb6c04768857a4f3edceacb75f 5863 admin optional
xfsprogs_6.13.0-2+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=+M9s
-----END PGP SIGNATURE-----
pgpHbsVNI4doc.pgp
Description: PGP signature
--- End Message ---
