Bug#927947: tripwire: default config for /var/log is SEC_CONFIG, should probably be SEC_LOG
Package: tripwire
Version: 2.4.3.1-2+b4
Severity: normal
Tags: newcomer
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
Daily tripwire emails reported modifications of log files. Of course log files
are modified.
Closer look at /etc/tripwire/twpol.txt revealed that /var/log WAS setup to use
SEC_CONFIG definition
and not better fitting SEC_LOG definition. This setup is probably the default
in debian stretch, and
I dont think it should be.
Simply changing the definition in the line containing /var/log to SEC_LOG made
daily tripwire emails
much shorter
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 9.8
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8),
LANGUAGE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages tripwire depends on:
ii debconf [debconf-2.0] 1.5.61
ii exim4-daemon-light [mail-transport-agent] 4.89-2+deb9u3
tripwire recommends no packages.
tripwire suggests no packages.
-- Configuration Files:
/etc/tripwire/twpol.txt changed:
@@section GLOBAL
TWBIN = /usr/sbin;
TWETC = /etc/tripwire;
TWVAR = /var/lib/tripwire;
@@section FS
SEC_CRIT = $(IgnoreNone)-SHa ; # Critical files that cannot change
SEC_BIN = $(ReadOnly) ;# Binaries that should not change
SEC_CONFIG= $(Dynamic) ; # Config files that are changed
# infrequently but accessed
# often
SEC_LOG = $(Growing) ; # Files that grow, but that
# should never change ownership
SEC_INVARIANT = +tpug ; # Directories that should never
# change permission or ownership
SIG_LOW = 33 ; # Non-critical files that are of
# minimal security impact
SIG_MED = 66 ; # Non-critical files that are of
# significant security impact
SIG_HI= 100 ;# Critical files that are
# significant points of
# vulnerability
(
rulename = "Tripwire Binaries",
severity = $(SIG_HI)
)
{
$(TWBIN)/siggen -> $(SEC_BIN) ;
$(TWBIN)/tripwire -> $(SEC_BIN) ;
$(TWBIN)/twadmin-> $(SEC_BIN) ;
$(TWBIN)/twprint-> $(SEC_BIN) ;
}
(
rulename = "Tripwire Data Files",
severity = $(SIG_HI)
)
{
$(TWVAR)/$(HOSTNAME).twd-> $(SEC_CONFIG) -i ;
$(TWETC)/tw.pol -> $(SEC_BIN) -i ;
$(TWETC)/tw.cfg -> $(SEC_BIN) -i ;
$(TWETC)/$(HOSTNAME)-local.key -> $(SEC_BIN) ;
$(TWETC)/site.key -> $(SEC_BIN) ;
#don't scan the individual reports
$(TWVAR)/report -> $(SEC_CONFIG) (recurse=0) ;
}
(
rulename = "Critical system boot files",
severity = $(SIG_HI)
)
{
/boot -> $(SEC_CRIT) ;
/lib/modules-> $(SEC_CRIT) ;
}
(
rulename = "Boot Scripts",
severity = $(SIG_HI)
)
{
/etc/init.d -> $(SEC_BIN) ;
/etc/rcS.d -> $(SEC_BIN) ;
/etc/rc0.d -> $(SEC_BIN) ;
/etc/rc1.d -> $(SEC_BIN) ;
/etc/rc2.d -> $(SEC_BIN) ;
/etc/rc3.d -> $(SEC_BIN) ;
/etc/rc4.d -> $(SEC_BIN) ;
/etc/rc5.d -> $(SEC_BIN) ;
/etc/rc6.d -> $(SEC_BIN) ;
}
(
rulename = "Root file-system executables",
severity = $(SIG_HI)
)
{
/bin-> $(SEC_BIN) ;
/sbin -> $(SEC_BIN) ;
}
(
rulename = "Root file-system libraries",
severity = $(SIG_HI)
)
{
/lib-> $(SEC_BIN) ;
}
(
rulename = "Security Control",
severity = $(SIG_MED)
)
{
/etc/passwd -> $(SEC_CONFIG) ;
/etc/shadow -> $(SEC_CONFIG) ;
}
(
rulename = "System boot changes",
severity = $(SIG_HI)
)
{
/var/lock -> $(SEC_CONFIG) ;
/var/run-> $(SEC_CONFIG) ; # daemon PIDs
/var/log-> $(SEC_LOG) ;
}
(
rulename = "Root config files",
severity = 100
)
{
/root -> $(SEC_CRIT) ; # Catch all additions
to /root
/root/.bashrc -> $(SEC_CONFIG) ;
/root/.bash_history -> $(SEC_CONFIG) ;
}
(
rulename = "Devices & Kernel information",
severity = $(SIG_HI),
)
{
/dev-> $(Device) ;
}
(
rulename = "Other configuration files",
severity = $(S
Bug#926329: nut-server: upsd dies if upsd.conf contains LISTEN line with nonexistant ip
Package: nut-server Version: 2.7.4-5 Severity: normal Tags: upstream newcomer Dear Maintainer, After reconfiguring 1 network interface to a new range, but forgetting to remove the last line, then one with 192.168.123.9 from /etc/nut/upsd.conf LISTEN 127.0.0.1 3493 LISTEN 192.168.119.253 3493 LISTEN 192.168.123.9 3493 The nut daemon refused to run after it at a later date was restarted. Syslog just reported: Apr 2 20:54:11 dkfitlet upsd[16941]: Network UPS Tools upsd 2.7.4 Apr 2 20:54:11 dkfitlet upsd[16941]: not listening on 192.168.123.9 port 3493 Apr 2 20:54:11 dkfitlet upsd[16941]: listening on 192.168.119.253 port 3493 Apr 2 20:54:11 dkfitlet upsd[16941]: listening on 127.0.0.1 port 3493 Apr 2 20:54:11 dkfitlet upsd[16941]: no listening interface available Notice the last line message: "no listening interface available" which is not true, as 2 out of 3 configured LISTEN addresses was available. Notice also that syslog does not say that upsd exitted. After removing the bad line from upsd.conf "LISTEN 192.168.123.9 3493" everything started working fine. I would expect that upsd listens to the addresses it can find and not just exit. -- System Information: Debian Release: 9.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-8-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages nut-server depends on: ii adduser 3.115 ii init-system-helpers 1.48 ii libc62.24-11+deb9u4 ii libnspr4 2:4.12-6 ii libnss3 2:3.26.2-1.1+deb9u1 ii libupsclient42.7.4-5 ii libusb-0.1-4 2:0.1.12-30 ii libwrap0 7.6.q-26 ii lsb-base 9.20161125 ii nut-client 2.7.4-5 ii udev 232-25+deb9u9 nut-server recommends no packages. Versions of packages nut-server suggests: ii nut-cgi 2.7.4-5 ii nut-ipmi 2.7.4-5 ii nut-snmp 2.7.4-5 ii nut-xml 2.7.4-5 -- Configuration Files: /etc/nut/ups.conf [Errno 13] Permission denied: '/etc/nut/ups.conf' /etc/nut/upsd.conf [Errno 13] Permission denied: '/etc/nut/upsd.conf' /etc/nut/upsd.users [Errno 13] Permission denied: '/etc/nut/upsd.users' -- no debconf information
Bug#727092: cvs: missing PAM support
Package: cvs Version: 2:1.12.13+real-9 Severity: normal Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? Upgrading from Squeeze to Wheezy. * What exactly did you do (or not do) that was effective (or ineffective)? Fixing entry line in /etc/inetd.conf to the new syntax. Recompiling the package with --enable-pam in cvs-1.12.13+real/debian/rules, dpkg-buildpackage -us -uc dpkg -i cvs_1.12.13+real-9_i386.deb * What was the outcome of this action? Almost correct outcome. PAM authentication now works, but EVERYDAY running apt-get upgrade tells me that there is a new binary precompiled CVS package ready for installation. dksrv001:/usr/local/src# apt-get --dry-run upgrade Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be upgraded: cvs 1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Inst cvs [2:1.12.13+real-9] (2:1.12.13+real-9 Debian:7.2/stable [i386]) Conf cvs (2:1.12.13+real-9 Debian:7.2/stable [i386]) Why does this keep happening? dksrv001:/usr/local/src# dpkg -l cvs Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ NameVersion Architecture Description +++-===--- ii cvs 2:1.12.13+real-9 i386 Concurrent Versions System The version numbers are identical: 2:1.12.13+real-9 2:1.12.13+real-9 * What outcome did you expect instead? That apt-get upgrade would not complain about a "newer" cvs package when there are infact no newer CVS package. *** End of the template - remove these lines *** -- System Information: Debian Release: 7.2 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (x86_64) Kernel: Linux 2.6.32-5-vserver-amd64 (SMP w/4 CPU cores) Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages cvs depends on: ii adduser 3.113+nmu3 ii dpkg 1.16.12 ii install-info 4.13a.dfsg.1-10 ii libbsd0 0.4.2-1 ii libc6 2.13-38 ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u1 ii libkrb5-3 1.10.1+dfsg-5+deb7u1 ii libpam0g 1.1.3-7.1 ii zlib1g1:1.2.7.dfsg-13 Versions of packages cvs recommends: ii openssh-client 1:6.0p1-4 Versions of packages cvs suggests: pn mksh ii rcs 5.8.1-1 -- debconf information: cvs/pserver_repos_individual: true cvs/pserver_setspawnlimit: false cvs/rotatekeep: 7 cvs/repositories: /srv/cvs cvs/badrepositories: create cvs/rotatekeep_individual: 7 cvs/rotatekeep_nondefault: no cvs/rotate_individual: true cvs/pserver_repos: some cvs/pserver: false cvs/pserver_spawnlimit: 400 cvs/rotatehistory: no -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#688550: dpkg: "version number does not start with digit" from old packages in "available" file
Package: dpkg Version: 1.16.12 Followup-For: Bug #688550 Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the situation? upgrading from squeeze to wheezy having linux vserver installed * What exactly did you do (or not do) that was effective (or ineffective)? edit available file * What was the outcome of this action? warnings go away * What outcome did you expect instead? That it would fail gracefully. *** End of the template - remove these lines *** which lines? those above? or below? dpkg: warning: parsing file '/var/lib/dpkg/available' near line 3661 package 'util-vserver-0.30.216-2918': error in Version string 'pre2918-1': version number does not start with digit dpkg: warning: parsing file '/var/lib/dpkg/available' near line 7643 package 'util-vserver-0.30.216': error in Version string 'pre2921-1': version number does not start with digit -- System Information: Debian Release: 7.2 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C) Shell: /bin/sh linked to /bin/dash Versions of packages dpkg depends on: ii libbz2-1.0 1.0.6-4 ii libc62.13-38 ii liblzma5 5.1.1alpha+20120614-2 ii libselinux1 2.1.9-5 ii tar 1.26+dfsg-0.1 ii zlib1g 1:1.2.7.dfsg-13 dpkg recommends no packages. Versions of packages dpkg suggests: ii apt 0.9.7.9 -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#598537: UUID is not enough. Gather all the information possible.
UUID is not enough. I would rather that the emails like the one quoted below would include as much information as possible or maybe configureable. smartctl -i /dev/sds fdisk -l /dev/sds mdadm --examine /dev/sde1 lsscsi | grep /dev/sds lsscsi -t | grep /dev/sds It would be nice to be able to see the enclosure it was sitting in as well, + the controller, but lsscsi shows the controller, lsscsi --hosts sg_inq /dev/sds JonB Begin forwarded message: > From: root > Date: 27. okt 2012 03.33.27 CEST > To: root > Subject: SMART error (SelfTest) detected on host: dkvideobackup > > This email was generated by the smartd daemon running on: > > host name: dkvideobackup > DNS domain: laerdal.global > NIS domain: (none) > > The following warning/error was logged by the smartd daemon: > > Device: /dev/sds [SAT], Self-Test Log error count increased from 2 to 3 > > For details see host's SYSLOG. > > You can also use the smartctl utility for further investigation. > The original email about this issue was sent at Fri Jul 20 02:56:46 2012 CEST > Another email message will be sent in 24 hours if the problem persists. > -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#651425: pvs works today?
Hi pvs works today? root@dkgnode00:/srv/ganeti/iso# pvs --noheadings --nosuffix --units=m --unbuffered '--separator=|' -opv_name,vg_name,pv_free,pv_attr /dev/sdb1|xenvg|427656.00|a-- /dev/sda5|dkgnode00|0|a-- root@dkgnode00:/srv/ganeti/iso# dpkg -l lvm2 Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ NameVersion Description +++-===-===-== ii lvm22.02.88-2 Linux Logical Volume Manager What is different? Well, first of all the disks is now in the opposite order, and they are that because i assembled them wrongly. I am testing ganeti, and use some i7 desktops PC from people that is not at work. dkgnode00 is the same machine as yesterday, but with opposite disk order. dkgnode01 is a different machine from yesterday, but with the same order? JonB -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#651425: lvm2 pvs output cripled so ganeti fails to create guest instances
Package: lvm2
Version: 2.02.88-2
Severity: normal
Dear Maintainer,
*** Please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these lines ***
Trying out Ganeti 2.4.5 I ran into a problem where ganeti could not create
guest instances.
With the help of spadaccio in #ganeti on freenode, I tracked it down to out
from pvs not
being as it was supposed to.
pvs --noheadings --nosuffix --units=m --unbuffered '--separator=|'
-opv_name,vg_name,pv_free,pv_attr
/dev/sdb5|dkgnode00|0|a--
/dev/sda1|xenvg|466568.00|a--kgnod/dev/sda1|xenvg|466568.00|
If i install lvm2_2.02.66-5_amd64.deb from squeeze then the output is:
pvs --noheadings --nosuffix --units=m --unbuffered '--separator=|'
-opv_name,vg_name,pv_free,pv_attr
/dev/sdb5|dkgnode00|0|a-
/dev/sda1|xenvg|466568.00|a-
Spadaccio opened ganeti bug http://code.google.com/p/ganeti/issues/detail?id=207
Switching back and forth between lvm2_2.02.66-5_amd64.deb
lvm2_2.02.88-2_amd64.deb
from squeeze and wheezy made no difference, the bug is repeatable _FOR_ me. Not
for Spadaccio.
The difference between our setups might be that his xenvg VolumeGroup is first
and mine is 2.
after a system volume group.
root@ugcn1:~# pvs --noheadings --nosuffix --units=m --unbuffered
'--separator=|' -opv_name,vg_name,pv_free,pv_attr
/dev/sda5|xenvg|353428.00|a--
/dev/loop1|test|996.00|a--
I created my wheezy installation by installing from a debian squeeze netinstall
cd image which
I then did an apt-get dist-upgrade to wheezy.
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.1.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages lvm2 depends on:
ii dmsetup 2:1.02.67-2
ii initscripts 2.88dsf-13.13
ii libc6 2.13-21
ii libdevmapper1.02.1 2:1.02.67-2
ii libreadline55.2-11
ii libudev0175-2
ii lsb-base3.2-28
lvm2 recommends no packages.
lvm2 suggests no packages.
-- Configuration Files:
/etc/lvm/lvm.conf changed:
devices {
# Where do you want your volume groups to appear ?
dir = "/dev"
# An array of directories that contain the device nodes you wish
# to use with LVM2.
scan = [ "/dev" ]
# If set, the cache of block device nodes with all associated symlinks
# will be constructed out of the existing udev database content.
# This avoids using and opening any inapplicable non-block devices or
# subdirectories found in the device directory. This setting is applied
# to udev-managed device directory only, other directories will be scanned
# fully. LVM2 needs to be compiled with udev support for this setting to
# take effect. N.B. Any device node or symlink not managed by udev in
# udev directory will be ignored with this setting on.
obtain_device_list_from_udev = 1
# If several entries in the scanned directories correspond to the
# same block device and the tools need to display a name for device,
# all the pathnames are matched against each item in the following
# list of regular expressions in turn and the first match is used.
preferred_names = [ ]
# Try to avoid using undescriptive /dev/dm-N names, if present.
# preferred_names = [ "^/dev/mpath/", "^/dev/mapper/mpath", "^/dev/[hs]d" ]
# A filter that tells LVM2 to only use a restricted set of devices.
# The filter consists of an array of regular expressions. These
# expressions can be delimited by a character of your choice, and
# prefixed with either an 'a' (for accept) or 'r' (for reject).
# The first expression found to match a device name determines if
# the device will be accepted or rejected (ignored). Devices that
# don't match any patterns are accepted.
# Be careful if there there are symbolic links or multiple filesystem
# entries for the same device as each name is checked separately against
# the list of patterns. The effect is that if any name matches any 'a'
# pattern, the device is accepted; otherwise if any name matches any 'r'
# pattern it is rejected; otherwise it is accepted.
# Don't have more than one filter line active at once: only one gets used.
# Run vgscan after you change this parameter to ensure that
# the cache file gets regenerated (see below).
# If it doesn't do what you expect, check the output of 'vgscan -'.
# By default we accept every block device:
filter = [ "r|/dev/drbd.*|", "a/.*/" ]
# Exclude the cdrom drive
# filter = [ "r|/dev/cdrom|" ]
# When testing I like to work
Bug#649485: [Hostname-devel] Bug#649485: Sometimes hostname hangs and a lot of cronjobs pile up
On 23/11/2011, at 09.39, Michael Meskes wrote: > On Mon, Nov 21, 2011 at 12:57:30PM +0100, Jon Bendtsen wrote: >> Sometimes I experience that hostname hangs without giving a reply. This >> results in a >> lot of cronjobs piling up and occasionally filling /tmp. > > You mean it waits for some DNS query? Or does it have problems accessing a > file? I never heard about anything like this. Please give some details. I will try next time I run into this problem, but it is not something I can reproduce at will. JonB -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#649485: Sometimes hostname hangs and a lot of cronjobs pile up
Package: hostname Version: 3.04 Severity: normal Sometimes I experience that hostname hangs without giving a reply. This results in a lot of cronjobs piling up and occasionally filling /tmp. Could we get some sort of parameter for hostname such that it never waits more than given time for an answer. Or could we get such that cronjobs never pile up -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (500, 'stable'), (10, 'testing'), (1, 'experimental'), (1, 'unstable') Architecture: i386 (x86_64) Kernel: Linux 2.6.32-5-vserver-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages hostname depends on: ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib hostname recommends no packages. hostname suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#648721: missing /dev => [: 15382: -eq: unexpected operator
Package: rkhunter Version: 1.3.6-4 Severity: normal Running this command rkhunter -c -r /rsyncbackup/latest/finished/dkvideobackup --configfile dkvideobackup_rkhunter.conf --rwo /rsyncbackup/latest/finished/dkvideobackup contains an rsynced debian server with these excludes: /dev /proc /sys /data /tmp /lib/init/rw /var/tmp lost+found .journal /usr/tmp /var/cache/apt/archives/ /mnt Warning: The modules file '/rsyncbackup/latest/finished/dkvideobackup/proc/modules' is missing. Warning: /dev does not exist. [: 15382: -eq: unexpected operator exit code 1. Configuration file changes: dbdir (yes i did run the above command with --propupd and with --update before running with -c) tmpdir Allow root login nagios in inetd, allow .mdadm .udev, .initramfs If I run this command and then rerun the above command mkdir /rsyncbackup/latest/finished/dkvideobackup/dev then it does not come up with that error. Before trying with mkdir I tried EXISTWHITELIST="/dev" in the configuration file, but that did not solve the problem. -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rkhunter depends on: ii binutils 2.20.1-16 The GNU assembler, linker and bina ii debconf [debconf-2.0] 1.5.36.1 Debian configuration management sy ii file 5.04-5Determines file type using "magic" ii net-tools 1.60-23 The NET-3 networking toolkit ii perl 5.10.1-17squeeze2 Larry Wall's Practical Extraction ii ssmtp [mail-transport- 2.64-4extremely simple MTA to get mail o Versions of packages rkhunter recommends: ii curl 7.21.0-2 Get a file from an HTTP, HTTPS or ii iproute20100519-3networking and traffic control too ii lsof 4.81.dfsg.1-1 List open files ii lynx 2.8.8dev.5-1 Text-mode WWW Browser (transitiona ii perl [libdigest-sha-pe 5.10.1-17squeeze2 Larry Wall's Practical Extraction ii unhide 20100201-1Forensic tool to find hidden proce ii wget 1.12-2.1 retrieves files from the web Versions of packages rkhunter suggests: ii bsd-mailx 8.1.2-0.20100314cvs-1 simple mail user agent pn tripwire (no description available) -- Configuration Files: /etc/rkhunter.conf changed [not included] -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#522583: fping broken on some arm systems?
On 19/11/2010, at 12.26, Niko Tyni wrote: > On Fri, Nov 19, 2010 at 11:56:49AM +0100, Jon Bendtsen wrote: > >> I also see this problem on my Guru plug server plus. It came with debian >> lenny installed, but got no fping graphs in smokeping. Since smokeping talks >> about getting the latest fping from debian sid then i got the debian source >> package from sid and builded it on lenny. Smokeping is still from lenny. > > Ah! "Builded it on lenny" is the crucial detail that was missing until now. > That explains it, and I can reproduce it now. sorry that I forgot to specify the detail that i build it myself. > Just install the binary -16.1 .deb package instead of building it yourself > and the problem should be gone. That usually results in other dependencies and I end up with Debian Frankenstein, which is why i prefer the source build. > The real fix must be something that changed in the build dependencies, > most probably glibc, between the builds of -16 and -16.1. I'll look into > it out of curiosity, but I doubt that results in an update to the lenny > libc (or whatever the real cause is) anymore. > > Cc'ing the debian-arm list to let them know this is resolved. Thanks again > to everybody who helped out. No, thanks for helping me out so I can get my tools working :-D dkplugbab9:/tmp# dpkg -i fping_2.4b2-to-ipv6-16.1_armel.deb (Reading database ... 18936 files and directories currently installed.) Preparing to replace fping 2.4b2-to-ipv6-15 (using fping_2.4b2-to-ipv6-16.1_armel.deb) ... Unpacking replacement fping ... Setting up fping (2.4b2-to-ipv6-16.1) ... Processing triggers for man-db ... dkplugbab9:/tmp# fping -ei 1000 -c 10 192.168.119.8 192.168.119.8 : [0], 84 bytes, 0.39 ms (0.39 avg, 0% loss) 192.168.119.8 : [1], 84 bytes, 0.34 ms (0.36 avg, 0% loss) 192.168.119.8 : [2], 84 bytes, 0.36 ms (0.36 avg, 0% loss) 192.168.119.8 : [3], 84 bytes, 0.35 ms (0.36 avg, 0% loss) 192.168.119.8 : [4], 84 bytes, 0.37 ms (0.36 avg, 0% loss) 192.168.119.8 : [5], 84 bytes, 0.22 ms (0.33 avg, 0% loss) 192.168.119.8 : [6], 84 bytes, 0.23 ms (0.32 avg, 0% loss) 192.168.119.8 : [7], 84 bytes, 0.37 ms (0.32 avg, 0% loss) 192.168.119.8 : [8], 84 bytes, 0.37 ms (0.33 avg, 0% loss) 192.168.119.8 : [9], 84 bytes, 0.37 ms (0.33 avg, 0% loss) 192.168.119.8 : xmt/rcv/%loss = 10/10/0%, min/avg/max = 0.22/0.33/0.39 Starting smokeping no longer gives any output and I am beginning to see output :-) JonB -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#522583: Bug #522583: fping broken on some arm systems?
Hi I also see this problem on my Guru plug server plus. It came with debian lenny installed, but got no fping graphs in smokeping. Since smokeping talks about getting the latest fping from debian sid then i got the debian source package from sid and builded it on lenny. Smokeping is still from lenny. http://www.globalscaletechnologies.com/p-32-guruplug-server-plus.aspx dkplugbab9:~# uname -a Linux dkplugbab9 2.6.32-7-g56678ec #1 PREEMPT Mon Feb 8 03:49:55 PST 2010 armv5tel GNU/Linux dkplugbab9:~# cat /proc/cpuinfo Processor : Feroceon 88FR131 rev 1 (v5l) BogoMIPS: 1192.75 Features: swp half thumb fastmult edsp CPU implementer : 0x56 CPU architecture: 5TE CPU variant : 0x2 CPU part: 0x131 CPU revision: 1 Hardware: Marvell Plug2L Reference Board Revision: Serial : dkplugbab9:/usr/local/nagios# fping -v fping: Version 2.4b2_to $Date: 2002/01/16 00:33:42 $ fping: comments to da...@remote.net dkplugbab9:/usr/local/nagios# dpkg -l fping Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) ||/ NameVersion Description +++-===-===-== ii fping 2.4b2-to-ipv6-16.1 sends ICMP ECHO_REQUEST packets to network hosts Host taken from this bug report: -- dkplugbab9:/usr/local/nagios# /usr/bin/fping -ei 1000 -c 10 194.109.5.227 194.109.5.227 : [0], 84 bytes, 1545439 ms (1545439 avg, 0% loss) 194.109.5.227 : duplicate for [16777217], 84 bytes, 128692 ms 194.109.5.227 : [16777217], 84 bytes, 128692 ms (837066 avg, 0% loss) 194.109.5.227 : duplicate for [33554434], 84 bytes, 0.-146092420 ms 194.109.5.227 : [33554434], 84 bytes, 0.-146092420 ms (71069 avg, 0% loss) 194.109.5.227 : duplicate for [50331651], 84 bytes, 1345153 ms 194.109.5.227 : [50331651], 84 bytes, 1345153 ms (389590 avg, 0% loss) 194.109.5.227 : duplicate for [67108868], 84 bytes, 0.-25639070 ms 194.109.5.227 : [67108868], 84 bytes, 0.-25639070 ms (260394 avg, 0% loss) 194.109.5.227 : duplicate for [83886085], 84 bytes, 0.-178800906 ms 194.109.5.227 : [83886085], 84 bytes, 0.-178800906 ms (0.-8100627 avg, 0% loss) 194.109.5.227 : duplicate for [100663302], 84 bytes, 1009942 ms 194.109.5.227 : [100663302], 84 bytes, 1009942 ms (74843 avg, 0% loss) 194.109.5.227 : duplicate for [117440519], 84 bytes, 0.-60202216 ms 194.109.5.227 : [117440519], 84 bytes, 0.-60202216 ms (0.-976472 avg, 0% loss) 194.109.5.227 : duplicate for [134217736], 84 bytes, 2144156 ms 194.109.5.227 : [134217736], 84 bytes, 2144156 ms (229559 avg, 0% loss) ^C 194.109.5.227 : xmt/rcv/%loss = 9/9/0%, min/avg/max = 0.-178800906/229559/2144156 But maybe it is just that host? nope, guess not Windows server: dkplugbab9:/usr/local/nagios# /usr/bin/fping -ei 1000 -c 10 192.168.23.131 192.168.119.131 : [0], 84 bytes, 0.-43073784 ms (0.-43073784 avg, 0% loss) 192.168.119.131 : duplicate for [16777217], 84 bytes, 0.-205423639 ms 192.168.119.131 : [16777217], 84 bytes, 0.-205423639 ms (0.-124248711 avg, 0% loss) 192.168.119.131 : duplicate for [33554434], 84 bytes, 622409 ms 192.168.119.131 : [33554434], 84 bytes, 622409 ms (0.-62085488 avg, 0% loss) 192.168.119.131 : duplicate for [50331651], 84 bytes, 0.-99597716 ms 192.168.119.131 : [50331651], 84 bytes, 0.-99597716 ms (0.-71463545 avg, 0% loss) 192.168.119.131 : duplicate for [67108868], 84 bytes, 1674508 ms 192.168.119.131 : [67108868], 84 bytes, 1674508 ms (0.-23680665 avg, 0% loss) 192.168.119.131 : duplicate for [83886085], 84 bytes, 46881 ms 192.168.119.131 : [83886085], 84 bytes, 46881 ms (0.-18952532 avg, 0% loss) ^C 192.168.119.131 : xmt/rcv/%loss = 6/6/0%, min/avg/max = 0.-205423639/0.-18952532/1674508 Linux server - dkplugbab9:/usr/local/nagios# /usr/bin/fping -ei 1000 -c 10 192.168.23.3 192.168.123.3 : [0], 84 bytes, 2048586 ms (2048586 avg, 0% loss) 192.168.123.3 : duplicate for [16777217], 84 bytes, 782970 ms 192.168.123.3 : [16777217], 84 bytes, 782970 ms (1415778 avg, 0% loss) 192.168.123.3 : duplicate for [33554434], 84 bytes, 0.-43774975 ms 192.168.123.3 : [33554434], 84 bytes, 0.-43774975 ms (797935 avg, 0% loss) 192.168.123.3 : duplicate for [50331651], 84 bytes, 0.-174477977 ms 192.168.123.3 : [50331651], 84 bytes, 0.-174477977 ms (162256 avg, 0% loss) 192.168.123.3 : duplicate for [67108868], 84 bytes, 811478 ms 192.168.123.3 : [67108868], 84 bytes, 811478 ms (292101 avg, 0% loss) ^C 192.168.123.3 : xmt/rcv/%loss = 5/5/0%, min/avg/max = 0.-174477977/292101/2048586 Mac desktop: --- dkplugbab9:/usr/local/nagios# /usr/bin/fping -ei 1000 -c 10 192.168.19.8 192.168.119.8 : [0], 84 bytes, 675952 ms (675952 avg, 0
Bug#538289: SID bugzilla3 database creation - no such file or directory
Package: bugzilla3 Version: 3.2.4.0-3 Severity: normal real secerity is unknown (as bugzilla3 is still not completely installed, but it seems to move past database creation, because it creates a .htaccess file). During installing of SID bugzilla3 on debian lenny it creates my bugzilla3 database, and i get an output line i dont like: Inserting values into the 'bug_severity' table: 'blocker' sortkey: 100 'critical'sortkey: 200 No such file or directory at /usr/share/perl5/Bugzilla/Install/Filesystem.pm line 440, line 253. 'major' sortkey: 300 'normal' sortkey: 400 'minor' sortkey: 500 'trivial' sortkey: 600 'enhancement' sortkey: 700 I dont like that part about no such file or directory. -- System Information: Debian Release: 5.0.2 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.22.18-vs2.2.0.6 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages bugzilla3 depends on: ii apache22.2.9-10+lenny4 Apache HTTP Server metapackage ii apache2-mpm-prefork [h 2.2.9-10+lenny4 Apache HTTP Server - traditional n ii dbconfig-common1.8.39common framework for packaging dat ii debconf1.5.24Debian configuration management sy ii libappconfig-perl 1.56-2Perl module for configuration file ii libcgi-pm-perl 3.38-2Simple Common Gateway Interface Cl ii libdbd-mysql-perl 4.007-1 A Perl5 database interface to the ii libemail-mime-creator- 1.454-2 Simple Email::MIME mail message cr ii libemail-mime-modifier 1.442-3 Modify Email::MIME objects easily ii libemail-reply-perl1.202-1 Reply to a Message ii libemail-send-perl 2.192-3 Simply Sending Email ii libmail-sendmail-perl 0.79-5Send email from a perl script ii libtemplate-perl 2.19-1.1lenny1.1 template processing system written ii libtimedate-perl 1.1600-9 Time and date functions for Perl ii mysql-client-5.0 [mysq 5.0.51a-24+lenny1 MySQL database client binaries ii patch 2.5.9-5 Apply a diff file to an original ii perl-modules [libcgi-p 5.10.0-19 Core Perl modules ii ssmtp [mail-transport- 2.62-3extremely simple MTA to get mail o ii ucf3.0016Update Configuration File: preserv ii yui2.5.0-1 Yahoo User Interface Library Versions of packages bugzilla3 recommends: ii cvs 1:1.12.13-12 Concurrent Versions System pn imagemagic (no description available) ii libchart-perl 2.4.1-5 Chart Library for Perl ii libxml-parser-p 2.36-1.1+b1 Perl module for parsing XML files ii mysql-server5.0.51a-24+lenny1MySQL database server (metapackage ii mysql-server-5. 5.0.51a-24+lenny1MySQL database server binaries ii perlmagick 7:6.3.7.9.dfsg2-1~lenny1 Perl interface to the libMagick gr Versions of packages bugzilla3 suggests: pn bugzilla3-doc (no description available) pn graphviz (no description available) ii libauthen-radius-perl 0.13-1 user authentication against radius pn libgd-gd2-perl | libgd-noxpm- (no description available) pn libgd-graph-perl (no description available) ii libgd-text-perl 0.86-5 Text utilities for use with GD ii libhtml-parser-perl 3.56-1+b1 A collection of modules that parse ii libhtml-scrubber-perl 0.08-4 Perl extension for scrubbing/sanit ii libmailtools-perl 2.03-1 Manipulate email in perl programs ii libmime-tools-perl5.427-1Perl5 modules for MIME-compliant m ii libnet-ldap-perl 1:0.36-1 A Client interface to LDAP servers ii libsoap-lite-perl 0.710.08-1 Client and server side SOAP implem ii libwww-perl 5.813-1WWW client/server library for Perl ii libxml-twig-perl 1:3.32-1 Perl module for processing huge XM ii patchutils0.2.31-4 Utilities to work with patches -- debconf information: bugzilla3/customized_values: true bugzilla3/passwords-do-not-match: bugzilla3/customized_values_ask_again: false bugzilla3/database-type: mysql bugzilla3/remove-error: abort bugzilla3/mysql/admin-user: root bugzilla3/dbconfig-remove: * bugzilla3/dbconfig-install: true bugzilla3/upgrade-error: abort bugzilla3/internal/reconfiguring: false bugzilla3/remote/newhost: bugzilla3/internal/skip-preseed: false bugzilla3/db/app-user: bugzilla3 bugzilla3/dbconfig-reinstall: false bugzilla3/mysql/method: unix socket * bugzilla3/bugzilla_admin_rea
Bug#538286: bugzilla3 from SID install on Lenny, fsck's db_pass in localconfig
Package: bugzilla3 Version: 3.2.4.0-3 Severity: grave Justification: renders package unusable In file /etc/bugzilla3/localconfig, the line with db_pass ends up including it twice, like this: $db_pass = '$db_pass = \'not_my_real_password\';'; but it should only be: $db_pass = 'not_my_real_password'; After changing it then i can continue with the installation, and it created my database. (at the moment i am stuck somewhere after the db creation, so still not 100% installed.) -- System Information: Debian Release: 5.0.2 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.22.18-vs2.2.0.6 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages bugzilla3 depends on: ii apache22.2.9-10+lenny4 Apache HTTP Server metapackage ii apache2-mpm-prefork [h 2.2.9-10+lenny4 Apache HTTP Server - traditional n ii dbconfig-common1.8.39common framework for packaging dat ii debconf1.5.24Debian configuration management sy ii libappconfig-perl 1.56-2Perl module for configuration file ii libcgi-pm-perl 3.38-2Simple Common Gateway Interface Cl ii libdbd-mysql-perl 4.007-1 A Perl5 database interface to the ii libemail-mime-creator- 1.454-2 Simple Email::MIME mail message cr ii libemail-mime-modifier 1.442-3 Modify Email::MIME objects easily ii libemail-reply-perl1.202-1 Reply to a Message ii libemail-send-perl 2.192-3 Simply Sending Email ii libmail-sendmail-perl 0.79-5Send email from a perl script ii libtemplate-perl 2.19-1.1lenny1.1 template processing system written ii libtimedate-perl 1.1600-9 Time and date functions for Perl ii mysql-client-5.0 [mysq 5.0.51a-24+lenny1 MySQL database client binaries ii patch 2.5.9-5 Apply a diff file to an original ii perl-modules [libcgi-p 5.10.0-19 Core Perl modules ii ssmtp [mail-transport- 2.62-3extremely simple MTA to get mail o ii ucf3.0016Update Configuration File: preserv ii yui2.5.0-1 Yahoo User Interface Library Versions of packages bugzilla3 recommends: ii cvs 1:1.12.13-12 Concurrent Versions System pn imagemagic (no description available) ii libchart-perl 2.4.1-5 Chart Library for Perl ii libxml-parser-p 2.36-1.1+b1 Perl module for parsing XML files ii mysql-server5.0.51a-24+lenny1MySQL database server (metapackage ii mysql-server-5. 5.0.51a-24+lenny1MySQL database server binaries ii perlmagick 7:6.3.7.9.dfsg2-1~lenny1 Perl interface to the libMagick gr Versions of packages bugzilla3 suggests: pn bugzilla3-doc (no description available) pn graphviz (no description available) ii libauthen-radius-perl 0.13-1 user authentication against radius pn libgd-gd2-perl | libgd-noxpm- (no description available) pn libgd-graph-perl (no description available) ii libgd-text-perl 0.86-5 Text utilities for use with GD ii libhtml-parser-perl 3.56-1+b1 A collection of modules that parse ii libhtml-scrubber-perl 0.08-4 Perl extension for scrubbing/sanit ii libmailtools-perl 2.03-1 Manipulate email in perl programs ii libmime-tools-perl5.427-1Perl5 modules for MIME-compliant m ii libnet-ldap-perl 1:0.36-1 A Client interface to LDAP servers ii libsoap-lite-perl 0.710.08-1 Client and server side SOAP implem ii libwww-perl 5.813-1WWW client/server library for Perl ii libxml-twig-perl 1:3.32-1 Perl module for processing huge XM ii patchutils0.2.31-4 Utilities to work with patches -- debconf information: bugzilla3/customized_values: true bugzilla3/passwords-do-not-match: bugzilla3/customized_values_ask_again: false bugzilla3/database-type: mysql bugzilla3/remove-error: abort bugzilla3/mysql/admin-user: root bugzilla3/dbconfig-remove: * bugzilla3/dbconfig-install: true bugzilla3/upgrade-error: abort bugzilla3/internal/reconfiguring: false bugzilla3/remote/newhost: bugzilla3/internal/skip-preseed: false bugzilla3/db/app-user: bugzilla3 bugzilla3/dbconfig-reinstall: false bugzilla3/mysql/method: unix socket * bugzilla3/bugzilla_admin_real_name: Jon Bendtsen bugzilla3/remote/host: bugzilla3/install-error: retry bugzilla3/remote/port: bugzilla3/upgrade-backup: true * bugzilla3/bugzilla_admin_name: r...@laerdal.dk bugzilla3/dbconfig-upgrade: true bugzilla3/purge: false bugzilla3/db/dbname: bugzilla3 b
Bug#517069: inn2: mailpost does not exit with error
Package: inn2 Version: 2.4.3-1 Severity: normal I was posting my old lurker archive to my new inn archive and i was using mailpost to post the emails to the newsgroup. I had used csplit to split each mail into one file, and then a cat $file | mailpost ... && rm $file thinking that any errors would get caught. But no, the files was deleted :-( the error message was: inews failed: inews: cannot send article to server: 441 437 Too old -- "Mon, 13 Dec 2004 20:59:58 +0100" inews: article not posted and i think mailpost should exit with an error when articles are not posted. -- System Information: Debian Release: 4.0 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.22.18-vs2.2.0.6 Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C) Versions of packages inn2 depends on: ii cron3.0pl1-100 management of regular background p ii debconf [debconf-2. 1.5.11etch2 Debian configuration management sy ii inn2-inews 2.4.3-1 NNTP client news injector, from In ii libc6 2.3.6.ds1-13etch9+b1 GNU C Library: Shared libraries ii libdb4.44.4.20-8 Berkeley v4.4 Database Libraries [ ii libpam0g0.79-5 Pluggable Authentication Modules l ii libperl5.8 5.8.8-7etch6 Shared Perl library ii libssl0.9.8 0.9.8c-4etch4SSL shared libraries ii perl5.8.8-7etch6 Larry Wall's Practical Extraction ii perl-base [perlapi- 5.8.8-7etch6 The Pathologically Eclectic Rubbis ii procps 1:3.2.7-3/proc file system utilities ii ssmtp [mail-transpo 2.61-11.1extremely simple MTA to get mail o ii time1.7-21 The GNU time program for measuring inn2 recommends no packages. -- debconf information: inn2/preinst-upgrade-largefiles: false inn2/preinst-upgrade1: false inn2/postinst-cannot-start: -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#381995: nvi: ex ignores -F option and copies the file to /var/tmp/vi.recover/ anyway
Package: nvi Version: 1.79-22 Severity: normal When running ex/nex with the -F option it does not do as the manpage says. The manpage says that -F will prevent copying the whole file, but it still copies it to /var/tmp/vi.recover/ and thus fills up that filesystem. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.4.26 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages nvi depends on: ii libc6 2.3.5-8GNU C Library: Shared libraries an ii libncurses5 5.4-4 Shared libraries for terminal hand -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
