Your message dated Fri, 24 Sep 2021 17:21:56 +0000
with message-id <[email protected]>
and subject line Bug#982961: fixed in tomcat9 9.0.53-1
has caused the Debian Bug report #982961,
regarding tomcat9: cron.daily/tomcat9 compress /var/log/tomcat9 *subfolders* 
breaking some deployed apps
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
982961: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982961
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tomcat9
Version: 9.0.31-1~deb10u3
Severity: normal

Dear Maintainer,

I have deployed some tomcat apps. The have thier own logging facilities
outputing plain files. I thing tomcat9 packages invite me to put them
under a subfolder of /Var/log/tomcat9. If I do that, cron.daily/tomcat9
gzip them, even if they live, even if they are not rotated, and it
fail every day starting on installation day + 1 (at 2nd cron exec).

Similar but different from #925926 as it concerns application logs and
not tomcat own logs.

tomcat9.service systemd unit restrict app writes heavily (great) :

lpouzenc@lud-hp1:~$ grep ^Read /lib/systemd/system/tomcat9.service
ReadWritePaths=/etc/tomcat9/Catalina/
ReadWritePaths=/var/lib/tomcat9/webapps/
ReadWritePaths=/var/log/tomcat9/

I didn't see any documentation mentionning that subfolders there are
handled by debian script... but it does :

lpouzenc@lud-hp1:~$ grep -A 1 '^\s*find' /etc/cron.daily/tomcat9 
                        find /var/log/$NAME/ -name \*.$EXT -daystart -mtime +0 
-print0 \
                                | xargs --no-run-if-empty -0 gzip -9

(because there is no -maxdepth 1)

So this cron gzip some app's live logs, and mail sysadmin everynight
(except first one) with about .gz file that already exists in those
subfolders, assuming the deployed app have at least one log file that
have a stable filename without date of the day in it.

Maybe the cron should only handle tomcat own logs (catalina.out is
already excluded by $EXT). OR may be default unit should provide a
writable subfolders for the app logs to be deployed by users by default.

Thanks for all the packaging work already well done.

Regards,
Ludovic Pouzenc

-- System Information:
Debian Release: 10.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-0.bpo.5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tomcat9 depends on:
ii  lsb-base        10.2019051400
ii  systemd         241-7~deb10u6
ii  tomcat9-common  9.0.31-1~deb10u3
ii  ucf             3.0038+nmu1

Versions of packages tomcat9 recommends:
ii  libtcnative-1  1.2.21-1

Versions of packages tomcat9 suggests:
pn  tomcat9-admin     <none>
pn  tomcat9-docs      <none>
pn  tomcat9-examples  <none>
pn  tomcat9-user      <none>

-- Configuration Files:
/etc/tomcat9/policy.d/01system.policy [Errno 13] Permission non accordée: 
'/etc/tomcat9/policy.d/01system.policy'
/etc/tomcat9/policy.d/02debian.policy [Errno 13] Permission non accordée: 
'/etc/tomcat9/policy.d/02debian.policy'
/etc/tomcat9/policy.d/03catalina.policy [Errno 13] Permission non accordée: 
'/etc/tomcat9/policy.d/03catalina.policy'
/etc/tomcat9/policy.d/04webapps.policy [Errno 13] Permission non accordée: 
'/etc/tomcat9/policy.d/04webapps.policy'
/etc/tomcat9/policy.d/50local.policy [Errno 13] Permission non accordée: 
'/etc/tomcat9/policy.d/50local.policy'

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: tomcat9
Source-Version: 9.0.53-1
Done: Markus Koschany <[email protected]>

We believe that the bug you reported is fixed in the latest version of
tomcat9, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <[email protected]> (supplier of updated tomcat9 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Sep 2021 15:37:51 +0200
Source: tomcat9
Architecture: source
Version: 9.0.53-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<[email protected]>
Changed-By: Markus Koschany <[email protected]>
Closes: 982961 987179
Changes:
 tomcat9 (9.0.53-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 9.0.53.
     - Drop security patches. Fixed upstream.
     - Fix CVE-2021-41079:
       Apache Tomcat did not properly validate incoming TLS packets. When Tomcat
       was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially
       crafted packet could be used to trigger an infinite loop resulting in a
       denial of service.
   * Declare compliance with Debian Policy 4.6.0.
   * Set the fileOwner of catalina.out to tomcat explicitly.
     Thanks to Adam Cecile for the report. (Closes: #987179)
   * Refresh 0021-dont-test-unsupported-ciphers.patch
   * tomcat9.cron.daily: Set maxdepth to 1 so that log files of custom
     applications in subdirectories of /var/log/tomcat9 are not compressed.
     Thanks to Ludovic Pouzenc for the report. (Closes: #982961)
   * Exclude TestJNDIRealmIntegration because of missing dependencies.
   * d/rules: dh_auto_test override: Set addOSGi to false when building the
     tests to prevent a FTBFS.
Checksums-Sha1:
 bdf8ff90af8bc7f8ff501580c485a6647c6e8091 2874 tomcat9_9.0.53-1.dsc
 18f655144d542da5145e98945f870d6101ab24b7 4019968 tomcat9_9.0.53.orig.tar.xz
 77b70213b843c8a01a2d7c848fa9be8e40f72748 35304 tomcat9_9.0.53-1.debian.tar.xz
 f945176ae39519f8560d294c9ffd28a1b9aa69d5 13580 tomcat9_9.0.53-1_amd64.buildinfo
Checksums-Sha256:
 69ce0e876fc44bcd8c766fa8d13ab75a536c47b70873cfa807dc3b7c31ed1cb1 2874 
tomcat9_9.0.53-1.dsc
 a8ae88c93825d4a7c73e4bf4096c092be8fea622ade28fb0cb8fe2157d4537dc 4019968 
tomcat9_9.0.53.orig.tar.xz
 be20c481478285abe27ffe06a77ae585784fa689a3bd6331b28e461688dc977b 35304 
tomcat9_9.0.53-1.debian.tar.xz
 9822b04f9272ae421dbc5528318d982f6af4145411dd539d4876243a722b66d7 13580 
tomcat9_9.0.53-1_amd64.buildinfo
Files:
 96befa3f3b2d2b06d608536d52bac5e1 2874 java optional tomcat9_9.0.53-1.dsc
 3f28516011f2bdac1f788a5e45ee00fe 4019968 java optional 
tomcat9_9.0.53.orig.tar.xz
 2fe41f53a2c61bcfdef948e3d98fda93 35304 java optional 
tomcat9_9.0.53-1.debian.tar.xz
 a16b703180b85f20f67933d5b18cebb7 13580 java optional 
tomcat9_9.0.53-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=rJDx
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
 Please use
[email protected] for discussions and questions.

Reply via email to