Your message dated Sat, 26 May 2007 13:47:02 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#426107: fixed in molly-guard 0.3-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: molly-guard
Version: 0.2.2-1
Severity: grave
Justification: renders package unusable

The typical command I use to shutdown a computer is:

        shutdown -h now

I've been doing this for a long time (possibly pre-linux), and it's the
command string that my fingers remember automatically.

This morning my son was being obnoxious and was not getting ready to go
out, rather he was playing on his computer.  I ssh'ed into his computer
and typed "shutdown -h now" to shut it down.

Except that I accidentally *really* ssh'd into my server, at a hosting
center 30 km away, and shut it down.  For real.  Requiring me to drive
all over town to get keys and cards and get into the hosting center and
press the 'On' button.

I actually had molly-guard installed on the computer in question, and I
understood this was *exactly* the kind of scenario that molly-guard is
intended to protect against.  So I can't understand *why* molly-guard
fails to intercept the "-h" option (i.e. "halt") to shutdown except to
reason that someone has a mistaken belief that this is the "help" option.

As a result, I am marking this grave :-)

The fix is trivial, of course.  If possible it would be nice to see the
fix in Etch r1 also.

Thanks,
                                Andrew McMillan.

PS.  It's a great idea.  In fact when my son (the one whose computer I
was actually trying to shut downi here) was about 14 months old he was
caught repeatedly pressing the "On/Off" switch on a client's server
that he shouldn't have had access too, much like the original Molly.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (690, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-rc2-hippy (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=POSIX (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages molly-guard depends on:
ii  sysvinit                     2.86.ds1-38 System-V-like init utilities

molly-guard recommends no packages.

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: molly-guard
Source-Version: 0.3-1

We believe that the bug you reported is fixed in the latest version of
molly-guard, which is due to be installed in the Debian FTP archive:

molly-guard_0.3-1.diff.gz
  to pool/main/m/molly-guard/molly-guard_0.3-1.diff.gz
molly-guard_0.3-1.dsc
  to pool/main/m/molly-guard/molly-guard_0.3-1.dsc
molly-guard_0.3-1_all.deb
  to pool/main/m/molly-guard/molly-guard_0.3-1_all.deb
molly-guard_0.3.orig.tar.gz
  to pool/main/m/molly-guard/molly-guard_0.3.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
martin f. krafft <[EMAIL PROTECTED]> (supplier of updated molly-guard package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 26 May 2007 14:52:57 +0200
Source: molly-guard
Binary: molly-guard
Architecture: source all
Version: 0.3-1
Distribution: unstable
Urgency: low
Maintainer: martin f. krafft <[EMAIL PROTECTED]>
Changed-By: martin f. krafft <[EMAIL PROTECTED]>
Description: 
 molly-guard - protects remote machines from accidental shutdowns/reboots
Closes: 408706 425831 426107
Changes: 
 molly-guard (0.3-1) unstable; urgency=low
 .
   * Shield shutdown -h; I am terribly sorry, Andrew! (closes: #426107).
     Now only shutdown -c and * --help are passed through regardless.
   * Added --help option, which now prints a short molly-guard help message
     followed by the actual command's help output.
   * Now should also work in su/sudo sessions because it now checks whether the
     creator of the current tty/pts is sshd, rather than the brittle check for
     the environment. Thanks to Craig Small and Don Armstrong for their sparks
     of brilliance (closes: #425831).
   * Corrected a typo in the package description (closes: #408706).
   * Added --pretend-ssh option to facilitate testing.
Files: 
 0ab2af9a9652c42032949594656cdd4a 642 admin extra molly-guard_0.3-1.dsc
 0ecb4fbfc5898bf9add1f04b684b7726 1556 admin extra molly-guard_0.3.orig.tar.gz
 ff6dbe47976d053fbd57a4104ed919a9 5606 admin extra molly-guard_0.3-1.diff.gz
 f0f065126c2726a8a611c224221c9d03 7792 admin extra molly-guard_0.3-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGWDcuIgvIgzMMSnURAu4DAKCLX1u7gJr2wRR+BQgaVWZ0y+IqPwCg4GmL
M0tCwmwsJg6bt2qPSXCXAtk=
=LMtR
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to