Your message dated Sat, 01 Dec 2012 14:49:35 +0000 with message-id <e1teonr-00078p...@franck.debian.org> and subject line Bug#680722: fixed in strongswan 4.6.4-6 has caused the Debian Bug report #680722, regarding strongswan-ikev1: running non-privileged breaks the updown script to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 680722: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680722 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: strongswan-ikev1 Version: 4.6.4-2 Severity: serious In 4.6.4-2 the package was changed to make the daemons run as a non-privileged user instead of root. This breaks my virtual IP setup (leftsourceip=) because after establishing tunnels pluto runs iproute2 commands which now fail because of insufficient privileges. The strongSwan wiki mentions that it also breaks leftfirewall=, which I use on machines currently running squeeze, I don't want this to break when I upgrade to wheezy... Running non-privileged is a nice security improvement but it's probably not the right default for the Debian package as it breaks important features. Thanks, -- Romain Francoise <rfranco...@debian.org> http://people.debian.org/~rfrancoise/
--- End Message ---
--- Begin Message ---Source: strongswan Source-Version: 4.6.4-6 We believe that the bug you reported is fixed in the latest version of strongswan, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 680...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yves-Alexis Perez <cor...@debian.org> (supplier of updated strongswan package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 01 Dec 2012 14:24:49 +0100 Source: strongswan Binary: strongswan libstrongswan strongswan-dbg strongswan-starter strongswan-ikev1 strongswan-ikev2 strongswan-nm Architecture: source all amd64 Version: 4.6.4-6 Distribution: unstable Urgency: low Maintainer: Rene Mayrhofer <rm...@debian.org> Changed-By: Yves-Alexis Perez <cor...@debian.org> Description: libstrongswan - strongSwan utility and crypto library strongswan - IPsec VPN solution metapackage strongswan-dbg - strongSwan library and binaries - debugging symbols strongswan-ikev1 - strongSwan Internet Key Exchange (v1) daemon strongswan-ikev2 - strongSwan Internet Key Exchange (v2) daemon strongswan-nm - strongSwan plugin to interact with NetworkManager strongswan-starter - strongSwan daemon starter and configuration file parser Closes: 680722 681312 Changes: strongswan (4.6.4-6) unstable; urgency=low . * debian/rules: - revert dropping privileges, it breaks too many setups for now and it's not possible to disable it. reopens #529854 and closes: #680722 * debian/control: - add Breaks/Replaces strongswan-ikev2 on libstrongswan because of moved plugins. closes: #681312 Checksums-Sha1: 44d96493aaf1f618013d7133db4a8045f0a14963 2298 strongswan_4.6.4-6.dsc d73b6f6ddaebaaeb9d5e58de59680799320a7d83 142008 strongswan_4.6.4-6.debian.tar.gz b7e3b66ac011dc98478e8d9d663f456327c14be4 95872 strongswan_4.6.4-6_all.deb 3646ec872d63c22805d1430d6272dd728adacb55 665720 libstrongswan_4.6.4-6_amd64.deb 3432e13874004cf3c046bbfe81e9dd8360706d7f 5943986 strongswan-dbg_4.6.4-6_amd64.deb 39d8b0c6d71b4e29732e899de2228526ed6011f9 344636 strongswan-starter_4.6.4-6_amd64.deb d0134fdcf74b03766febe8c09cbabf4dbc1a9a5f 358700 strongswan-ikev1_4.6.4-6_amd64.deb 26340c3c2e0c0d9881efbea907b54d04bad5d20f 264274 strongswan-ikev2_4.6.4-6_amd64.deb 59d5ce463bf53de27a8ee773f1e4c9a98d88607c 70852 strongswan-nm_4.6.4-6_amd64.deb Checksums-Sha256: be54fde95d74984d6bb7bc5ea7e339b28ca706c94e34e38ceedaca76696fdb20 2298 strongswan_4.6.4-6.dsc db1246b2e4eb5b12540c362dff8f7ad85fa0f677faaeaa4f489ab74828ffd346 142008 strongswan_4.6.4-6.debian.tar.gz c0c2288c17afaca3f235ac51c758fec34f9b1f57b1270efb179ee60aab504d67 95872 strongswan_4.6.4-6_all.deb c3612960c7f0ca1a64f2c4810aa57158c336cfecb65be3ecbe2d5e416e25f616 665720 libstrongswan_4.6.4-6_amd64.deb a9b44f32b61452fe0441fd6f66413b521d3bf7bba00248258519748a53477b9d 5943986 strongswan-dbg_4.6.4-6_amd64.deb c2e27db8f892c6d7a77b0f01f6f5ec73e82618b9d3aaacef4a296f65d47ebebf 344636 strongswan-starter_4.6.4-6_amd64.deb ebd11319ef70c628ab64327eb601abe15d9f0da210b838007b9993554b82463e 358700 strongswan-ikev1_4.6.4-6_amd64.deb 2eacdf999ec45b58aef9fa9e8e1eaa2c9373f1bb2f19fbabc9491ce7241179ee 264274 strongswan-ikev2_4.6.4-6_amd64.deb d5cbc2f4163608b8f603286beb1e26db33097ab02d6ec32c026e31b9e4f0d646 70852 strongswan-nm_4.6.4-6_amd64.deb Files: d4cac6f84051bf640512827bb40ca54c 2298 net optional strongswan_4.6.4-6.dsc c2b0d16c48de45d3068060b44e60f34c 142008 net optional strongswan_4.6.4-6.debian.tar.gz 3c0c13d628267cd172527740f3dd67a6 95872 net optional strongswan_4.6.4-6_all.deb 4bc61f555e02fa850271d4b3c4754c64 665720 net optional libstrongswan_4.6.4-6_amd64.deb 6fd331815d83d33d1bdc115f8d3136ea 5943986 debug extra strongswan-dbg_4.6.4-6_amd64.deb 56a85454d32f4ae4c3670764f01203ae 344636 net optional strongswan-starter_4.6.4-6_amd64.deb ee4383c47091e48532b2a81ca4c9c84c 358700 net optional strongswan-ikev1_4.6.4-6_amd64.deb e53d55f205e09243b098b621689a309f 264274 net optional strongswan-ikev2_4.6.4-6_amd64.deb 873f64d9b344038a0de4806cc2bc43d2 70852 net optional strongswan-nm_4.6.4-6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) iQEcBAEBCgAGBQJQug2PAAoJEG3bU/KmdcClcvQH/ifQ34Is9VM9vxhSHLnCLBUT DAOSLAQa6RJ0z5pqlBUDasXrh/hP4htET8pdaDK5SGAds7Z+0WtzLHYMd7V6JH3z P85pxKTHCFotmCVG8Ke4PZt5lhiuuskn7H9QheKYaR/cu+rZQ2aJtnppC4luT3c2 12cqx2+6E1NZwNLH+5IbITm2Pr/Qt9ndVxIL9Io2MUQ0B1AU/BZmn+pqzBg/7JsV sKugkm0oLayvl9zKJO5xuab0En48CzPRYUZ933GRhKLQ63kPPSabkKJRcrggpfnp GZOf3KzP+TeprdglYna7t5w1wM/oO72xEkSfMhGkYxE//RoVaZnBF3QT94VXXzY= =ezt4 -----END PGP SIGNATURE-----
--- End Message ---
