Your message dated Tue, 02 Aug 2016 10:51:58 +0000
with message-id <e1buxik-0008dn...@franck.debian.org>
and subject line Bug#821391: fixed in tomcat7 7.0.70-2
has caused the Debian Bug report #821391,
regarding tomcat7-admin: Patch 7.0.28+deb-u4 overwrite owner of all /etc/tomcat7
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
821391: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821391
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tomcat7-admin
Version: 7.0.28-4+deb7u4
Severity: important

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
        All tomcat servers crash after the auto update via unattended-upgrade
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
        Correct manually our specific owner files and restart tomcat7 service
   * What was the outcome of this action?
        Impossible to start all the tomcat7 services (with JMX  configured)
   * What outcome did you expect instead?
        that the patch don't modify files that don't come from the package.

Details :
        We use a tomcat7 debian installation.
        We modify to use tomcat7:tomcat7 user for the tomcat7 processes
        we want to add JMX access configuration with user/password access -> no 
debian doc found => configuration taken from "official" oracle documentation.
                => put jmxremote.user and jmxremote.password in /etc/tomcat7 
(symlinked to /var/lib/tomcat7/conf for official oracle path conservation)
                => mandatory kmxremote.password = right 600 on the file and 
then we chown tomcat7:tomcat7 the file too.

        We use unattended-upgrade for security patch. This morning -> deploying 
some tomcat7  patch on all serveurs.
        -> In the tomcat7.postinst there is chown -Rh root:(GROUP) on 
/etc/tomcat7 !
        => jmxremote.password misconfigured and tomcat7 don't start... 

Ideas or solutions :
        Modify only files coming from the package.
        Or interesting on how debian want we configure the JMX access, as if we 
take official recommandation it leads to a fatal crash. 


-- System Information:
Debian Release: 7.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages tomcat7-admin depends on:
ii  tomcat7-common  7.0.28-4+deb7u4

tomcat7-admin recommends no packages.

tomcat7-admin suggests no packages.

-- no debconf information

-- 
Ce courriel (incluant ses éventuelles pièces jointes) contient des informations 
confidentielles et/ou protégées ou dont la diffusion est restreinte. Si vous 
avez reçu ce courriel par erreur, vous ne devez ni le copier, ni l’utiliser, ni 
en divulguer le contenu à quiconque. Merci d’en avertir immédiatement 
l’expéditeur et d'effacer ce courriel de votre système. Renault Sport Racing 
décline toute responsabilité en cas de corruption par virus, d’altération ou de 
falsification de ce courriel lors de sa transmission par voie 
électronique.&lt;br&gt;&lt;i&gt;Renault Sport Racing s.a.s – Registre du 
Commerce et des Sociétés d'Evry (Numéro 306.140.807) – Siège social: 1-15 
Avenue du Président Kennedy, 91170 Viry Chatillon, 
France&lt;/i&gt;&lt;br&gt;This email (including any attachments) contains 
confidential and/or privileged information or information otherwise protected 
from disclosure. If you are not the intended recipient, please notify the 
sender immediately, do not copy this message or any attachments and do not use 
it for any purpose or disclose its content to any person, but delete this 
message and any attachments from your system. Renault Sport Racing disclaims 
any and all liability if this email transmission was virus corrupted, altered 
or falsified.&lt;br&gt;&lt;i&gt; Renault Sport Racing s.a.s – Commercial and 
Companies Registry of Evry (Number 306.140.807) – Registered office : 1-15 
Avenue du Président Kennedy, 91170 Viry Chatillon, France&lt;/i&gt;&lt;br&gt;

--- End Message ---
--- Begin Message ---
Source: tomcat7
Source-Version: 7.0.70-2

We believe that the bug you reported is fixed in the latest version of
tomcat7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 821...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <a...@debian.org> (supplier of updated tomcat7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 02 Aug 2016 11:43:11 +0200
Source: tomcat7
Binary: tomcat7-common tomcat7 tomcat7-user libtomcat7-java libservlet3.0-java 
libservlet3.0-java-doc tomcat7-admin tomcat7-examples tomcat7-docs
Architecture: source
Version: 7.0.70-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <a...@debian.org>
Description:
 libservlet3.0-java - Servlet 3.0 and JSP 2.2 Java API classes
 libservlet3.0-java-doc - Servlet 3.0 and JSP 2.2 Java API documentation
 libtomcat7-java - Servlet and JSP engine -- core libraries
 tomcat7    - Servlet and JSP engine
 tomcat7-admin - Servlet and JSP engine -- admin web applications
 tomcat7-common - Servlet and JSP engine -- common files
 tomcat7-docs - Servlet and JSP engine -- documentation
 tomcat7-examples - Servlet and JSP engine -- example web applications
 tomcat7-user - Servlet and JSP engine -- tools to create user instances
Closes: 821391
Changes:
 tomcat7 (7.0.70-2) unstable; urgency=medium
 .
   * Team upload.
   * Do not unconditionally override files in /etc/tomcat7. (Closes: #821391)
Checksums-Sha1:
 ca95c5adf0f9f248993643b4f2967968220953ac 2939 tomcat7_7.0.70-2.dsc
 302b2466ff27d14a3d9078922d4df99d39d16bad 66812 tomcat7_7.0.70-2.debian.tar.xz
Checksums-Sha256:
 706d3e806ba230cf3ccd5647772839bebd37d99eb3a86a9425f2ad1176d25e15 2939 
tomcat7_7.0.70-2.dsc
 eaa483f3bbad929bd45929c094da19279559c56fa7866697e9acef75bb159eda 66812 
tomcat7_7.0.70-2.debian.tar.xz
Files:
 de7b1840248ad30f81aa055925ab24e8 2939 java optional tomcat7_7.0.70-2.dsc
 029cdfdc05ce10b3344500ca360021ee 66812 java optional 
tomcat7_7.0.70-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=WsQR
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to