Bug#1044136: clamav-daemon: The server delivers "4.7.1 Tempfail- internal scan engine error" when sending with file attachments

2023-08-13 Thread Andreas Guenther
Package: clamav-daemon
Version: 1.0.1+dfsg-2
Severity: important

Dear Maintainer,

   * What led up to the situation?
Upgrading the dist from Debian 11 to Debian 12 results in the Clamav 
daemon being executable but not running:
root@mx ~ # netstat -tulips | fgrep clamd
=> no output!
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
In this edition

systemctl status clamav-daemon.service
● clamav-daemon.service - Clam AntiVirus userspace daemon
  Loaded: loaded (/lib/systemd/system/clamav-daemon.service; 
enabled; preset: enabled)
  Drop in: /etc/systemd/system/clamav-daemon.service.d
  └─extend.conf
  Active: active (running) since Fri 2023-08-11 10:13:54 CEST; 1h 
35min ago
TriggeredBy: ● clamav-daemon.socket
Docs: man:clamd(8)
  man:clamd.conf(5)
  https://docs.clamav.net/
  ...
 
you can clearly see that the service is triggered by the associated 
socket! This was not the case with Debian Linux Bullseye!

The only currently working solution is this:

systemctl disable --now clamav-daemon.socket
systemctl enable --now clamav-daemon.service

For only one system upgrade, that's pretty sloppy. Why do I need the 
socket here if it runs better without it?



-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
---
AlertExceedsMax disabled
PreludeEnable disabled
PreludeAnalyzerName = "ClamAV"
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
LogRotate = "yes"
ExtendedDetectionInfo = "yes"
PidFile disabled
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket = "3310"
TCPAddr = "127.0.0.1"
MaxConnectionQueueLength = "15"
StreamMaxLength = "26214400"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "30"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "3600"
ConcurrentDatabaseReload = "yes"
DisableCache disabled
VirusEvent disabled
ExitOnOOM disabled
AllowAllMatchScan = "yes"
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
GenerateMetadataJson disabled
User = "clamav"
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "6"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
ScanPE = "yes"
ScanELF = "yes"
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
HeuristicAlerts = "yes"
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
AlertBrokenExecutables disabled
AlertBrokenMedia disabled
AlertEncrypted = "yes"
StructuredCCOnly disabled
AlertEncryptedArchive = "yes"
AlertEncryptedDoc = "yes"
AlertOLE2Macros disabled
AlertPhishingSSLMismatch disabled
AlertPhishingCloak disabled
AlertPartitionIntersection disabled
ScanPDF = "yes"
ScanSWF = "yes"
ScanXMLDOCS = "yes"
ScanHWP3 = "yes"
ScanArchive = "yes"
ForceToDisk disabled
MaxScanTime = "12"
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "16"
MaxFiles = "1"
MaxEmbeddedPE = "10485760"
MaxHTMLNormalize = "10485760"
MaxHTMLNoTags = "2097152"
MaxScriptNormalize = "5242880"
MaxZipTypeRcg = "1048576"
MaxPartitions = "50"
MaxIconsPE = "100"
MaxRecHWP3 = "16"
PCREMatchLimit = "1"
PCRERecMatchLimit = "5000"
PCREMaxFileSize = "26214400"
OnAccessMountPath disabled
OnAccessIncludePath disabled
OnAccessExcludePath disabled
OnAccessExcludeRootUID disabled
OnAccessExcludeUID disabled
OnAccessExcludeUname disabled
OnAccessMaxFileSize = "5242880"
OnAccessDisableDDD disabled
OnAccessPrevention disabled
OnAccessExtraScanning disabled
OnAccessCurlTimeout = "5000"
OnAccessMaxThreads = "5"
OnAccessRetryAttempts disabled
OnAccessDenyOnError disabled
DevACOnly disabled
DevACDepth disabled
DevPerformance disabled
DevLiblog disabled
DisableCertCheck disabled
AlgorithmicDetection = "yes"
BlockMax disabled
PhishingAlwaysBlockSSLMismatch disabled
PhishingAlwaysBlockCloak disabled
PartitionIntersection disabled
OLE2BlockMacros disabled
ArchiveBlockEncrypted disabled

Config file: freshclam.conf
---
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose 

Bug#1042429: libvirt-daemon-system: VM running but virt-manager not connecting

2023-07-28 Thread Andreas Guenther
Package: libvirt-daemon-system
Version: 9.0.0-4
Severity: important
X-Debbugs-Cc: debian@linuxmaker.com

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***
   After starting, the Virt-manager window remains empty and instead shows the 
message "QEMU/KVM - Not Connected".

   * What led up to the situation?
 System upgrade from Debian 11 to Debian 12

   * What exactly did you do (or not do) that was effective (or
 ineffective)?
 Copy the file /var/lib/polkit-1/localauthority/10-vendor.d/60-libvirt.pkla 
from the package of the same name in Buster to the same place on the Bookworm 
installation. Restart libvirtd.
   * What was the outcome of this action?
 The virt-manager works as usual again
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 12.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libvirt-daemon-system depends on:
ii  adduser 3.134
ii  debconf [debconf-2.0]   1.5.82
ii  gettext-base0.21-12
ii  iptables1.8.9-2
ii  libvirt-clients 9.0.0-4
ii  libvirt-daemon  9.0.0-4
ii  libvirt-daemon-config-network   9.0.0-4
ii  libvirt-daemon-config-nwfilter  9.0.0-4
ii  libvirt-daemon-system-systemd   9.0.0-4
ii  logrotate   3.21.0-1
ii  polkitd 122-3

Versions of packages libvirt-daemon-system recommends:
ii  dmidecode3.4-1
ii  dnsmasq-base [dnsmasq-base]  2.89-1
ii  iproute2 6.1.0-3
ii  mdevctl  1.2.0-3+b1
ii  parted   3.5-3

Versions of packages libvirt-daemon-system suggests:
ii  apparmor3.0.8-3
pn  auditd  
ii  nfs-common  1:2.6.2-4
pn  open-iscsi  
pn  pm-utils
ii  systemd 252.12-1~deb12u1
pn  systemtap   
pn  zfsutils

-- debconf information:
  libvirt-daemon-system/id_warning: true



Bug#1042400: libvirt-daemon-system-systemd: virt-manager fails due to missing 60-libvirt.pkla

2023-07-27 Thread Andreas Guenther
Package: libvirt-daemon-system-systemd
Version: 9.0.0-4
Severity: important
X-Debbugs-Cc: debian@linuxmaker.com

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?


The program starts, but no connection is established. As a result, the VMs are 
not there even though they are running.
Including the 60-libvirt.pkla from the Buster package fixes this problem.
Please include this file in the current package.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 12.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libvirt-daemon-system-systemd depends on:
ii  systemd-container  252.12-1~deb12u1
ii  systemd-sysv   252.12-1~deb12u1

libvirt-daemon-system-systemd recommends no packages.

libvirt-daemon-system-systemd suggests no packages.

-- no debconf information



Bug#993164: proftpd-core: When upgrading from Buster to Bullseyes, the installation of ProFTPd fails

2021-08-28 Thread Andreas Guenther
Package: proftpd-core
Version: 1.3.7a+dfsg-12
Severity: serious
Justification: 1

Dear Maintainer,

   This error occurred for the first time when upgrading the system from Buster 
to Bullseye:
   dpkg: Fehler beim Bearbeiten des Paketes proftpd-mod-crypto (--configure):
   Abhängigkeitsprobleme - verbleibt unkonfiguriert
   dpkg: Abhängigkeitsprobleme verhindern Konfiguration von proftpd-mod-wrap:
   proftpd-mod-wrap hängt ab von proftpd-core (= 1.3.7a+dfsg-12); aber:
   Paket proftpd-core ist noch nicht konfiguriert.
   .
   .
   Fehler traten auf beim Bearbeiten von:
proftpd-core
proftpd-mod-crypto
proftpd-mod-wrap
proftpd-basic

   Then I deleted all the packages involved and tried to reinstall them with 
the same result:
dpkg --remove proftpd-basic proftpd-core proftpd-mod-crypto proftpd-mod-wrap
apt install proftpd-core proftpd-basic proftpd-mod-crypto proftpd-mod-wrap
   
   After deleting all packages again, I only installed proftpd-core:
apt install proftpd-core

   See "systemctl status proftpd.service" and "journalctl -xe" for details.
   dpkg: Fehler beim Bearbeiten des Paketes proftpd-core (--configure):
 »installiertes proftpd-core-Skript des Paketes 
post-installation«-Unterprozess gab den Fehlerwert 1 zurück
   Fehler traten auf beim Bearbeiten von:
   proftpd-core
   
   The package obviously cannot be installed due to the proftpd-core script.
   
   My expectation of you would be to make ProFTPd installable.

   Best regards
   Andreas Günther


-- System Information:
Debian Release: 11.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/12 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages proftpd-core depends on:
ii  adduser  3.118
ii  debianutils  4.11.2
ii  init-system-helpers  1.60
ii  libacl1  2.2.53-10
ii  libc62.31-13
ii  libcap2  1:2.44-1
ii  libcrypt11:4.4.18-4
ii  libhiredis0.14   0.14.1-1
ii  libmemcached11   1.0.18-4.2
ii  libmemcachedutil21.0.18-4.2
ii  libncursesw6 6.2+20201114-2
ii  libpam-runtime   1.4.0-9
ii  libpam0g 1.4.0-9
ii  libpcre3 2:8.39-13
ii  libssl1.11.1.1k-1
ii  libtinfo66.2+20201114-2
ii  lsb-base 11.1.0
ii  netbase  6.3
ii  sed  4.7-1
ii  ucf  3.0043
ii  zlib1g   1:1.2.11.dfsg-2

Versions of packages proftpd-core recommends:
ii  proftpd-doc  1.3.7a+dfsg-12

Versions of packages proftpd-core suggests:
pn  openbsd-inetd | inet-superserver  
ii  openssl   1.1.1k-1
pn  proftpd-mod-crypto
pn  proftpd-mod-geoip 
pn  proftpd-mod-ldap  
pn  proftpd-mod-mysql 
pn  proftpd-mod-odbc  
pn  proftpd-mod-pgsql 
pn  proftpd-mod-snmp  
pn  proftpd-mod-sqlite
pn  proftpd-mod-wrap  

-- Configuration Files:
/etc/logrotate.d/proftpd-core changed:
/var/log/proftpd/proftpd.log 
/var/log/proftpd/controls.log 
/var/log/proftpd/tls.log
/var/log/proftpd/sftp.log
{
weekly
missingok
rotate 7
compress
delaycompress
notifempty
create 640 root adm
sharedscripts
postrotate
# reload could be not sufficient for all logs, a restart is 
safer
invoke-rc.d proftpd restart 2>/dev/null >/dev/null || true
endscript
}
/var/log/proftpd/xferlog
/var/log/proftpd/xferreport
{
monthly
missingok
rotate 7
compress
delaycompress
notifempty
create 640 root adm
sharedscripts
prerotate
endscript
postrotate
# reload could be not sufficient for all logs, a restart is 
safer
invoke-rc.d proftpd restart 2>/dev/null >/dev/null || true
# run ftpstats on past transfer log
ftpstats -a -r -l 2 -d -h -f /var/log/proftpd/xferlog.0 
2>/dev/null >/var/log/proftpd/xferreport || true
endscript
}


-- no debconf information


Bug#576643: installation-reports: Postfix (2.6.5-3) on Debian Squezze don't generate /var/spool/postfix/etc/

2010-04-06 Thread Andreas Guenther
Package: installation-reports
Severity: grave
Tags: security
Justification: renders package unusable



-- Package-specific info:

Boot method: network
Image version: debian-testing-amd64-netinst.iso
Date: Date and time of the install

Machine: amd64
Partitions: df -Tl will do; the raw partition table is preferred


Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:   [ ]
Detect network card:[ ]
Configure network:  [ ]
Detect CD:  [ ]
Load installer modules: [ ]
Detect hard drives: [ ]
Partition hard drives:  [ ]
Install base system:[ ]
Clock/timezone setup:   [ ]
User/password setup:[ ]
Install tasks:  [ ]
Install boot loader:[ ]
Overall install:[ ]

Comments/Problems:

Description of the install, in prose, and any thoughts, comments
  and ideas you had during the initial install.


-- 

Please make sure that the hardware-summary log file, and any other
installation logs that you think would be useful are attached to this
report. Please compress large files using gzip.

Once you have filled out this report, mail it to sub...@bugs.debian.org.

==
Installer lsb-release:
==
DISTRIB_ID=Debian
DISTRIB_DESCRIPTION=Debian GNU/Linux installer
DISTRIB_RELEASE=6.0 (squeeze) - installer build 20100211
X_INSTALLATION_MEDIUM=cdrom

==
Installer hardware-summary:
==
uname -a: Linux groupware 2.6.30-2-amd64 #1 SMP Fri Sep 25 22:16:56 UTC 2009 
x86_64 GNU/Linux
lspci -knn: 00:00.0 Host bridge [0600]: Intel Corporation 440FX - 82441FX PMC 
[Natoma] [8086:1237] (rev 02)
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: 00:01.0 ISA bridge [0601]: Intel Corporation 82371SB PIIX3 ISA 
[Natoma/Triton II] [8086:7000]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: 00:01.1 IDE interface [0101]: Intel Corporation 82371SB PIIX3 IDE 
[Natoma/Triton II] [8086:7010]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: Kernel driver in use: PIIX_IDE
lspci -knn: 00:01.2 USB Controller [0c03]: Intel Corporation 82371SB PIIX3 USB 
[Natoma/Triton II] [8086:7020] (rev 01)
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: Kernel driver in use: uhci_hcd
lspci -knn: 00:01.3 Bridge [0680]: Intel Corporation 82371AB/EB/MB PIIX4 ACPI 
[8086:7113] (rev 03)
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: 00:02.0 VGA compatible controller [0300]: Cirrus Logic GD 5446 
[1013:00b8]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:1100]
lspci -knn: 00:03.0 Ethernet controller [0200]: Qumranet, Inc. Virtio network 
device [1af4:1000]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:0001]
lspci -knn: Kernel driver in use: virtio-pci
lspci -knn: 00:04.0 Multimedia audio controller [0401]: Ensoniq ES1370 
[AudioPCI] [1274:5000]
lspci -knn: Subsystem: Device [4942:4c4c]
lspci -knn: 00:05.0 SCSI storage controller [0100]: Qumranet, Inc. Virtio block 
device [1af4:1001]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:0002]
lspci -knn: Kernel driver in use: virtio-pci
lspci -knn: 00:06.0 RAM memory [0500]: Qumranet, Inc. Virtio memory balloon 
[1af4:1002]
lspci -knn: Subsystem: Qumranet, Inc. Device [1af4:0005]
lspci -knn: Kernel driver in use: virtio-pci
lsmod: Module  Size  Used by
lsmod: ufs62040  0 
lsmod: qnx49512  0 
lsmod: ntfs  177344  0 
lsmod: dm_mod 59384  0 
lsmod: md_mod 86692  0 
lsmod: xfs   457328  0 
lsmod: exportfs4656  1 xfs
lsmod: reiserfs  209000  0 
lsmod: jfs   151936  0 
lsmod: ext4  216240  0 
lsmod: jbd2   58816  1 ext4
lsmod: crc16   2272  1 ext4
lsmod: ext3  122848  1 
lsmod: jbd48152  1 ext3
lsmod: vfat   10400  0 
lsmod: fat48072  1 vfat
lsmod: ext2   62816  0 
lsmod: mbcache 8708  3 ext4,ext3,ext2
lsmod: virtio_balloon  4948  0 
lsmod: virtio_net 14288  0 
lsmod: virtio_blk  6312  3 
lsmod: virtio_pci  6392  0 
lsmod: virtio_ring 4272  1 virtio_pci
lsmod: virtio  5444  4 
virtio_balloon,virtio_net,virtio_blk,virtio_pci
lsmod: nls_utf81904  0 
lsmod: isofs  30840  0 
lsmod: nls_base8644  6 ntfs,jfs,vfat,fat,nls_utf8,isofs
lsmod: usb_storage61248  0 
lsmod: scsi_mod  158240  1 usb_storage
lsmod: fan 5144  0 
lsmod: ide_cd_mod 28856  0 
lsmod: cdrom  34248  1 ide_cd_mod