Bug#1039380: sphinxsearch: ships sysv-init script without systemd unit

2024-08-28 Thread Patrik Schindler
Hello,

On Sun, 25 Jun 2023 23:33:29 +0100 bl...@debian.org wrote:

> sphinxsearch has been flagged by Lintian as shipping a sysv-init script 
> without a corresponding systemd unit file. The default init system in Debian 
> is systemd, and so far this worked because a transitional sysv-init-to-unit 
> generator was shipped by systemd. This is in the process of being deprecated 
> and will be removed by the time Trixie ships, so the remaining packages that 
> ship init scripts without systemd units will stop working.

But please retain the SysV-init script!

Systemd is just the *default* init system. SysV-init is still supported and 
valid.

Thank you.

:wq! PoC



Bug#1077317: ksmtuned: Please provide SysVinit script

2024-07-28 Thread Patrik Schindler
Package: ksmtuned
Version: 4.20150326+b1
Severity: wishlist

SysVinit is still supported with current Debian. Please provide a proper
initscript with the package, or forward this request to the maintainers of
orphan-sysvinit-scripts. Thank you.

-- System Information:
Debian Release: 12.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-23-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages ksmtuned depends on:
ii  libc6  2.36-9+deb12u7

Versions of packages ksmtuned recommends:
ii  qemu-system-x86 [qemu-kvm]  1:7.2+dfsg-7+deb12u6

ksmtuned suggests no packages.

-- no debconf information



Bug#1074109: RM: rsh-redone -- RoQA; obsolete; unmaintained; will break soon

2024-06-24 Thread Patrik Schindler
Hello,

> please remove rsh-redone, a reimplementation of rsh. Unfortunately it's been 
> orphaned in Debian in 2020, and upstream also stopped working on it 6 years 
> ago.

While I understand that the lack of a maintainer is a good reason to remove a 
package, "upstream stopped working on it" may be not.

> login will soon drop support for "-h" (= remote logins), then rsh will also 
> be broken.

Any reference on this?

> I hope that all systems have transitioned to ssh in the meantime.

Nope.

I still have use cases in tightly controlled LAN environments where raw 
transfer speed vs. useless CPU cycle burning for encryption is sought after.

Also, there is sometimes compatibility needed to older IBM operating systems in 
the Midrange/Mainframe environment but with a current Linux base.

Pity that those niches are not enough to keep r* commands alive.

Just my $.02.

:wq! PoC



Bug#1070035: apt-dater: Please implement custom tags

2024-04-29 Thread Patrik Schindler
Package: apt-dater
Version: 1.0.4-7
Severity: wishlist

I have quite hosts with manually installed software, such as MediaWiki,
Nextcloud, etc. With increasing host count, it becomes cumbersome and error
prone to maintain an up-to-date list which host has which software installed
manually. I wish if I could set tags in /etc/apt-dater-host.conf which
find their way into apt-dater's database on refresh. Hosts should be filtered
upon that value.

This would make it easy to dynamically generate a list of all MediaWiki
instances, and update host by host.

Thank you for considering.

-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-20-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages apt-dater depends on:
ii  libc6   2.36-9+deb12u6
ii  libglib-perl3:1.329.3-2+b2
ii  libglib2.0-02.74.6-2
ii  libncursesw66.4-4
ii  libpopt01.19+dfsg-1
ii  libtcl8.6   8.6.13+dfsg-2
ii  libtinfo6   6.4-4
ii  libxml-writer-perl  0.900-2
ii  libxml2 2.9.14+dfsg-1.3~deb12u1
ii  lockfile-progs  0.1.19
ii  openssh-client  1:9.2p1-2+deb12u2
ii  perl5.36.0-7+deb12u1
ii  procmail3.22-27
ii  tmux3.3a-3

apt-dater recommends no packages.

Versions of packages apt-dater suggests:
ii  apt-dater-host  1.0.1-6
pn  xsltproc

-- Configuration Files:
/etc/apt-dater/hosts.xml changed [not included]

-- no debconf information



Bug#985017: python3-whoosh: SyntaxWarning during package installation

2024-04-25 Thread Patrik Schindler
Issue still exists after being reported over three years ago.

:wq! PoC



Bug#1069096: mrtg: MRTG installation hangs with SysV-rc

2024-04-16 Thread Patrik Schindler
Package: mrtg
Version: 2.17.10-5+deb12u2
Severity: important

Installing MRRTG with SysV-rc yields:

Selecting previously unselected package mrtg.
(Reading database ... 101360 files and directories currently installed.)
Preparing to unpack .../mrtg_2.17.10-5+deb12u2_amd64.deb ...
Unpacking mrtg (2.17.10-5+deb12u2) ...
Setting up mrtg (2.17.10-5+deb12u2) ...
Starting MRTG
Daemonizing MRTG ...
Created symlink /etc/systemd/system/multi-user.target.wants/mrtg.service → 
/lib/systemd/system/mrtg.service.

Then, the installation process hangs.

ps tree:

apt-get install mrtg
 \_ /usr/bin/dpkg --status-fd 51 --configure --pending
 \_ sh -c (test -x /usr/lib/needrestart/dpkg-status && 
/usr/lib/needrestart/dpkg-status || cat > /dev/null)
 |   \_ sh -c (test -x /usr/lib/needrestart/dpkg-status && 
/usr/lib/needrestart/dpkg-status || cat > /dev/null)
 |   \_ /bin/sh /usr/lib/needrestart/dpkg-status
 \_ /usr/bin/perl -w /usr/share/debconf/frontend 
/var/lib/dpkg/info/mrtg.postinst configure
 \_ [mrtg.postinst] 

Killing debconf fronted leaves package in iF state. Mrtg is started and runs in 
background, though.

Looking into where the hang occurs:

~ # bash -x /var/lib/dpkg/info/mrtg.postinst configure
+ set -e
+ getent group
+ grep -q mrtg
+ getent passwd
+ grep -q mrtg
+ chmod 2750 /etc/mrtg
+ chmod 0640 /etc/mrtg/mrtg.cfg
+ chown mrtg:mrtg /etc/mrtg
+ chown mrtg:mrtg /etc/mrtg/mrtg.cfg
+ . /usr/share/debconf/confmodule
++ '[' '!' '' ']'
++ PERL_DL_NONLAZY=1
++ export PERL_DL_NONLAZY
++ '[' '' ']'
++ exec /usr/share/debconf/frontend /var/lib/dpkg/info/mrtg.postinst configure
Starting MRTG
Daemonizing MRTG ...
/usr/bin/deb-systemd-helper was not called from dpkg. Exiting.
/usr/bin/deb-systemd-helper was not called from dpkg. Exiting.
/usr/bin/deb-systemd-helper was not called from dpkg. Exiting.
=> And hangs here.

Adding an "exit 0" in line 56 (before the dh_installinit/13.11.4 block) allow 
the package configuration to succeed and the package state set to ii. Adding 
exit 0 later in the script does not solve the hang, I have no explanation for 
that.


-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-20-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages mrtg depends on:
ii  debconf [debconf-2.0]  1.5.82
ii  init-system-helpers1.65.2
ii  libc6  2.36-9+deb12u4
ii  libgd3 2.3.3-9
ii  libsnmp-session-perl   1.14~git20221124T101957-1
ii  perl   5.36.0-7+deb12u1

mrtg recommends no packages.

Versions of packages mrtg suggests:
ii  apache2 [httpd] 2.4.57-2
ii  lighttpd [httpd]1.4.69-1
ii  lynx [www-browser]  2.9.0dev.12-1
pn  mrtg-contrib

-- Configuration Files:
/etc/mrtg/mrtg.cfg [Errno 13] Permission denied: '/etc/mrtg/mrtg.cfg'

-- debconf information excluded


Bug#1057185: tzdata: leap-seconds.list expires in 28 December 2023 for Bullseye

2023-12-01 Thread Patrik Schindler
Hello,

thank you.

You are correct that there is no impact besides the warning message for this 
year. This message triggering many emails multiple times a day from 60 logcheck 
supervised machines is an impact, though.

Thus, may I kindly ask what circumstances are prohibiting an update *before* 
this message starts to appear? For future occasions.

Again, thank you.

:wq! PoC



Bug#1057186: tzdata: NTP complains about an expiring leap-seconds.list

2023-12-01 Thread Patrik Schindler
Package: tzdata
Version: 2021a-1+deb11u10
Severity: normal

Fore a few days now, I'm getting a message that a file is about to expire:

Nov 30 23:39:21 mymachine ntpd[3392]: leapsecond file 
('/usr/share/zoneinfo/leap-seconds.list'): will expire in less than 28 days

I observed this message appearing "regularly" after a new Debian release 
appearing on the still running oldstable machines. See also bugs #1012191, 
#964948.

bullseye-updates is included in my sources.list per instructions on 
https://wiki.debian.org/StableUpdates

Please provide an updated leap-seconds.list with a new updated tzdata, or 
advise how to deal with this situation properly.

-- System Information:
Debian Release: 11.8
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 
'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-26-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages tzdata depends on:
ii  debconf [debconf-2.0]  1.5.77

tzdata recommends no packages.

tzdata suggests no packages.

-- debconf information:
* tzdata/Areas: Europe
  tzdata/Zones/Africa:
  tzdata/Zones/SystemV:
  tzdata/Zones/Atlantic:
  tzdata/Zones/Arctic:
  tzdata/Zones/America:
* tzdata/Zones/Europe: Berlin
  tzdata/Zones/US:
  tzdata/Zones/Pacific:
  tzdata/Zones/Etc:
  tzdata/Zones/Asia:
  tzdata/Zones/Indian:
  tzdata/Zones/Antarctica:
  tzdata/Zones/Australia:



Bug#1055454: spamassassin: Spamassassin in Bookworm dropped SysVinit script

2023-11-19 Thread Patrik Schindler
Hello,

Am 19.11.2023 um 17:52 schrieb Noah Meyerhans :

> Hi Patrik. I apologize; I was getting ahead of myself when indicating that 
> the spamassassin init script is gone by design. It's not, actually.  It's 
> just moved to the spamd package, which was broken out from the base 
> spamassassin package. /etc/init.d/spamd is what you're looking for.

Thanks.

I have noticed that spamassassin has undergone a package split to spamassassin 
and spamd. Unfortunately, spamassassin did not pull in spamd, as I'd have 
expected on upgrade-time. This package-split is also not mentioned in the 
Debian package specific upgrade notes, where I'd have expected to find such an 
information:

https://www.debian.org/releases/stable/amd64/release-notes/ch-information.en.html

Shortly after my report I've restored Deb11 from backup due to too many 
unexpected things happening, leaving me with a half-broken system. SA being 
only part of the party.

Something which is novel for me. I'm currently testing upgrades on less complex 
installs. Upgrades on earlier releases were mostly hands on at conffiles, but 
Deb12 upgrades have shown some… quirks for SysVinit users, mainly due to the 
lack of (IMHO) proper dependencies, and documentation.

:wq! PoC



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-07 Thread Patrik Schindler
Am 07.11.2023 um 19:50 schrieb Thorsten Glaser :

>> Small but important. A system without (a running) logging daemon is not
> 
> Hmh, but…
> “From bookworm, rsyslog is no longer installed by default.”

I'm solely talking about system upgrades. Which — at last in my world — happen 
much more frequently than new installs.

>> Should I open up another bug report for making o-s-s a hard dependency for 
>> (one of) the SysVinit packages?
> 
> Hm, I don’t know if that would be helpful at the moment. And if SRM need one 
> we could just repurpose/retitle this one, as that would be the better outcome.

OK, thanks for clarifying.

:wq! PoC



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-07 Thread Patrik Schindler
Am 07.11.2023 um 10:58 schrieb Matthew Vernon :

> do feel free to propose some text for them).

How would be the proper way to do so?

> If you find future init scripts missing that aren't in 
> orphan-sysvinit-scripts and the relevant package maintainer isn't willing to 
> restore them, do file a bug report (ideally with the requested details from 
> the README - https://salsa.debian.org/matthew/orphan-sysvinit-scripts/ ) 
> against o-s-s and we can get them into trixie.
> 
> I had thought we'd caught nearly all of the scripts from bookworm, but if 
> there are missing ones there we could try and get a fix into the next point 
> release.

Thank you.

For the time being, I'm reluctant to go through the same chore again anytime 
soon.

> [are we at the point where this bug report can be closed?

From my side: Yes.

Q: Should I open up a proper bug report to make o-s-s not a recommended but a 
hard dependency package? Or is this discussion enough that this will be 
triggered by the SysVinit maintainers?

:wq! PoC



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-07 Thread Patrik Schindler
Am 07.11.2023 um 02:28 schrieb Thorsten Glaser :


>> As I'm learning from a discussion in bug #1055466, this is due to 
>> orphan-sysvinit-scripts "only" being recommended and not a hard dependency.
> 
> Recommends count, they are installed by default since, uh, lenny or so (a 
> decision I still personally revert on all systems because that also includes 
> transitive Recommends; instead I inspect the list of recommended packages 
> manually).

Reiterating what I've stated in #1055466 in other words… leaving aside 
recommends-are-default, missing recommends IMHO should not half-break a system 
at upgrade time.

> In trixie, o-s-s definitely should be a Depends of one of the packages 
> (sysvinit? sysv-rc? or what?) but it was too late for bookworm, and it only 
> affected users of a small number of packages there, IIRC.

Small but important. A system without (a running) logging daemon is not a 
proper Linux system. What exactly should pull in is probably a mere matter of 
taste.

> But yes, maybe that should be fixed in a stable upgrade, now that we know 
> o-s-s is here to stay, it will be required in the next release, and there is 
> visible user impact. Back then these things weren’t yet this clear.

Well, I definitely got some bruises and I'm still contemplating about other 
distro options.

Should I open up another bug report for making o-s-s a hard dependency for (one 
of) the SysVinit packages?

>>> I dislike the having the init scripts separate very much, too. But it’s 
>>> either that…
>> 
>> … or try to reconcile Devuan efforts with Debian policies.
> 
> Ugh, no.

Sigh. That's why I hate politics. Technology can't fix what politics and 
half-cooked compromises has broken. And affected users stay behind with "WTF".

:wq! PoC



Bug#1055466: rsyslog: Rsyslog in Bookworm dropped SysVinit script

2023-11-06 Thread Patrik Schindler
Am 07.11.2023 um 01:05 schrieb Michael Biebl :

> Am 07.11.23 um 00:09 schrieb Patrik Schindler:
>> Am 06.11.2023 um 21:09 schrieb Michael Biebl :
>>> Not correct. If you have sysvinit-core installed, it will pull in 
>>> orphan-sysvinit-scripts by default which ships a rsyslog sysv init script.
>> I have sysvinit-core installed and orphan-sysvinit-scripts was not pulled in 
>> automatically.
> 
> Which means you have Recommends disabled (which is not the Debian default).
> It is expected that users how do that know what they are doing and are aware 
> of the consequences.

Now you're making it too easy for you by simply putting the blame back.

Recommends always pulled in a lot of bloat, so I disabled this many releases 
ago, for a very reason, without any adverse effect *ever*.

And now disabled *recommendations* make a system partly fail after upgrade.

First: This shows that orphan-sysvinit-scripts should be pulled in as 
dependency and not as recommendation, at least with Bookworm. Which is a moot 
point because this is a bug report about rsyslogd.

Second: This also shows that separating initscripts from the core packages has 
been a bad idea. You can't fix things with technology when politics are 
involved.

:wq! PoC



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-06 Thread Patrik Schindler
Am 07.11.2023 um 01:59 schrieb Thorsten Glaser :

>> I have sysvinit-core installed and orphan-sysvinit-scripts was not pulled in 
>> automatically.
> Yeah, it’s not.

As I'm learning from a discussion in bug #1055466, this is due to 
orphan-sysvinit-scripts "only" being recommended and not a hard dependency.

> I dislike the having the init scripts separate very much, too. But it’s 
> either that…

… or try to reconcile Devuan efforts with Debian policies.

:wq! PoC



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-06 Thread Patrik Schindler
Am 06.11.2023 um 21:20 schrieb Matthias Geiger :

> This is caused by package maintainers just dropping init scripts, and not 
> honoring the GR about init systems in Debian.

May I ask you to elaborate? What is GR?

> The init-diversity team has been putting a lot of work into maintaining 
> sysvinit and related packages; please appreciate the effort they are putting 
> in.
> 
> sysvinit (or openRC, in my case) is still usable with debian. The dropped 
> scripts are provided by the orphan-sysvinit-scripts page.

I have sysvinit-core installed and orphan-sysvinit-scripts was not pulled in 
automatically.

In fact, I wasn't aware about orphan-sysvinit-scripts until just now. I would 
have expected something that important to be mentioned in the "issues" 
documentation: 
https://www.debian.org/releases/stable/amd64/release-notes/ch-moreinfo.en.html

For Debian 11, there was no need for this package (for me!) and it's also not 
mentioned in the bullseye documentation: 
https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html

Bottom line: Something about dependencies went wrong in an unexpected way. The 
first time that it had such grave impact. I'm using Debian since 3.0 and was 
very happy that system upgrades were rather painless. Until now.

> While some people would be probably happy to see sysvinit go it'd be a big 
> loss for debian at whole.

I don't *want* it to go. In fact, I want to have it. But in a proper state.

I also don't want to experience following the documentation, upgrade my 
machines(s), and be faced with an unknown amount of services not coming up, in 
the end costing me a whole day to wade through conffiles, with questionable 
changes being unloaded to the sysadmin (the master/slave/whitelist/blacklist 
discussion) and discovering that half of the system just doesn't come up 
because of maintainer's neglect of SysVinit.

~ $ dpkg -l |wc -l
1315

Maybe you can understand my frustration. I don't intent to belittle anyones 
efforts in keeping SysVinit alive on Debian, but the current state of affair is 
a foul compromise to not confront maintainers: Package-separate initscripts do 
not sound like a good idea but a workaround for a political issue. When things 
become political, they become messy. My experience.

:wq! PoC



Bug#1055466: rsyslog: Rsyslog in Bookworm dropped SysVinit script

2023-11-06 Thread Patrik Schindler
Am 06.11.2023 um 21:09 schrieb Michael Biebl :

> Not correct. If you have sysvinit-core installed, it will pull in 
> orphan-sysvinit-scripts by default which ships a rsyslog sysv init script.

I have sysvinit-core installed and orphan-sysvinit-scripts was not pulled in 
automatically.

In fact, I wasn't aware about orphan-sysvinit-scripts until just now. I would 
have expected something that important to be mentioned in the "issues" 
documentation: 
https://www.debian.org/releases/stable/amd64/release-notes/ch-moreinfo.en.html

For Debian 11, there was no need for this package and it's also not mentioned 
in the bullseye documentation: 
https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html

>> Existing SysVinit installations silently fail to write logs after upgrading 
>> which is a serious condition for servers.
> 
> Not true, see above.

Well, true from my experience with thee VMs I've upgraded so far. Two of these 
were templates to be cloned to production machines, so I did't check if syslog 
was running.

Bottom line: Something about dependencies went wrong in an unexpected way. The 
first time that it had such grave impact. I'm using Debian since 3.0 and was 
very happy that system upgrades were rather painless. Until now.

>> Because SysVinit is still supported in Debian in general, please revive 
>> SysVinit support.
> 
> Sorry, this is not going to happen.
> sysvinit is dead. orphan-sysvinit-scripts is a bandaid for stragglers, 
> nothing more, nothing less.

I'm not a straggler, I just don't see Systemd out-benefitting SysVinit in terms 
of debug-ability and clarity how it works. My view is 100% server centric. When 
I'm called out on a Sunday at 3am in hungover state because an important server 
does a hiccup, and the customer tried to "fix" things and broke that even more 
and all the machine shows is a blinking cursor, the least that I want to cope 
with is with Systemd intricacies.

I'm sure the arguments have all been exchanged when people outvoted Debian to 
do like everybody else and switch to Systemd. No more to say from my part.

:wq! PoC



Bug#1055454: spamassassin: Spamassassin in Bookworm dropped SysVinit script

2023-11-06 Thread Patrik Schindler
Am 06.11.2023 um 19:28 schrieb Noah Meyerhans :

> The removal of the sysvinit script was intentional.  Per Debian policy 
> section 9.3.1, "Packages including a service unit may optionally include an 
> init script to support other init systems". Spamd provides a service unit. 
> There is no requirement to support any other startup mechanisms or init 
> systems, and I have no interest in supporting the old init script anymore.

Thank you for your clear words.

:wq! PoC



Bug#1031046: Asterisk not in Bookworm

2023-11-06 Thread Patrik Schindler
Hello,

I also was caught by surprise that Asterisk isn't included in Bookworm. What's 
more, this (for servers) important package is not mentioned in the official 
documentation about caveats!

https://www.debian.org/releases/stable/amd64/release-notes/ch-information.en.html

Following the discussion, I wonder, why Asterisk wasn't kept under limited 
security support, like binutils?

Also, other packages provide new upstream versions instead of burdening the 
maintainers with tedious porting of fixes to keep an earlier release. I know 
Debian is famous for this mindset, but sometimes pragmatism beats ideology?

:wq! PoC



Bug#1055466: rsyslog: Rsyslog in Bookworm dropped SysVinit script

2023-11-06 Thread Patrik Schindler
Package: rsyslog
Version: 8.2302.0-1
Severity: important

Surprisingly, after upgrading to Bookworm, the SysVinit script to start rsyslog
is no longer there. This renders rsyslog unusable for SysVinit users without
manual intervention.

Rsyslog has been the main syslog service for many years until Debian people
choose to adopt Systemd like everybody else.

Existing SysVinit installations silently fail to write logs after upgrading
which is a serious condition for servers.

Because SysVinit is still supported in Debian in general, please revive
SysVinit support.

Related: bug 1055463.

-- System Information:
Debian Release: 12.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages rsyslog depends on:
ii  libc6 2.36-9+deb12u3
ii  libestr0  0.1.11-1
ii  libfastjson4  1.2304.0-1
ii  liblognorm5   2.0.6-4
ii  libsystemd0   252.17-1~deb12u1
ii  libuuid1  2.38.1-5+b1
ii  libzstd1  1.5.4+dfsg2-5
ii  zlib1g1:1.2.13.dfsg-1

Versions of packages rsyslog recommends:
ii  logrotate  3.21.0-1

Versions of packages rsyslog suggests:
pn  rsyslog-doc   
pn  rsyslog-gssapi
pn  rsyslog-mongodb   
pn  rsyslog-mysql | rsyslog-pgsql 
pn  rsyslog-openssl | rsyslog-gnutls  
pn  rsyslog-relp  

-- Configuration Files:
/etc/logcheck/ignore.d.server/rsyslog [Errno 13] Permission denied: 
'/etc/logcheck/ignore.d.server/rsyslog'
/etc/logrotate.d/rsyslog changed [not included]
/etc/rsyslog.conf changed [not included]

-- no debconf information



Bug#1055463: sysvinit-core: Please entirely remove SysVinit

2023-11-06 Thread Patrik Schindler
Package: sysvinit-core
Version: 3.06-4
Severity: wishlist

After I've upgraded my server to Bookworm today, I'll now do a rollback from
backup because of numerous issues with many services not coming up anymore.
All due to the decreasing willingness of maintainers to support SysVinit, by
intentionally removing /etc/init.d scripts from packages.

Debian offering SysVinit packages is at least with Debian 12 just a fig leaf,
luring users into believing they have a choice of init system which they in
fact lack. Increasingly so with every new release of Debian Linux.

This lack of true support renders production machines faulty at upgrade time,
which is an absolute no-go, IMHO!

For this reason, I propose to remove SysVinit completely from the next Debian
release, with appropriate checking routines at upgrade time, so upgraded
machines won't run into a "don't boot anymore" condition. This will make a
clear statement for everybody instead of the current ambiguity where individual
packages arbitrarily support SysVinit or not, at the mercy of their
maintainers.

-- System Information:
Debian Release: 12.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages sysvinit-core depends on:
ii  debconf [debconf-2.0]  1.5.82
ii  initscripts3.06-4
ii  libc6  2.36-9+deb12u3
ii  libselinux13.4-1+b6
ii  mount  2.38.1-5+b1
ii  sysv-rc3.06-4
ii  sysvinit-utils 3.06-4

Versions of packages sysvinit-core recommends:
pn  orphan-sysvinit-scripts  

Versions of packages sysvinit-core suggests:
ii  bootlogd  3.06-4

-- debconf information excluded



Bug#1055454: spamassassin: Spamassassin in Bookworm dropped SysVinit script

2023-11-06 Thread Patrik Schindler
Package: spamassassin
Version: 4.0.0-6
Severity: important

Surprisingly, after upgrading to Bookworm, the SysVinit script to start
spamassassin is no longer there. This renders spamassassin unusable for
SysVinit users without manual intervention.

Because SysVinit is still supported in Debian in general, please revive
SysVinit support.

-- System Information:
Debian Release: 12.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages spamassassin depends on:
ii  adduser 3.134
ii  curl7.88.1-10+deb12u4
ii  libhtml-parser-perl 3.81-1
ii  libhttp-date-perl   6.05-2
ii  libio-string-perl   1.08-4
ii  libmail-dkim-perl   1.20230212-1
ii  libnet-dns-perl 1.36-1
ii  libnetaddr-ip-perl  4.079+dfsg-2+b1
ii  libsocket6-perl 0.29-3
ii  libsys-hostname-long-perl   1.5-3
ii  libwww-perl 6.68-1
ii  perl [libarchive-tar-perl]  5.36.0-7
ii  sysvinit-utils [lsb-base]   3.06-4

Versions of packages spamassassin recommends:
ii  gnupg  2.2.40-1.1
pn  libbsd-resource-perl   
pn  libmail-dmarc-perl 
ii  libmail-spf-perl   2.9.0-5
ii  perl [libsys-syslog-perl]  5.36.0-7
ii  sa-compile 4.0.0-6
ii  spamc  4.0.0-6

Versions of packages spamassassin suggests:
ii  libdbi-perl   1.643-4
pn  libencode-detect-perl 
pn  libgeoip2-perl
ii  libio-socket-ssl-perl 2.081-2
pn  libnet-patricia-perl  
ii  perl [libcompress-zlib-perl]  5.36.0-7
pn  pyzor 
pn  razor 

-- Configuration Files:
/etc/default/spamassassin changed [not included]
/etc/spamassassin/init.pre changed [not included]
/etc/spamassassin/local.cf changed [not included]
/etc/spamassassin/v310.pre changed [not included]
/etc/spamassassin/v320.pre changed [not included]
/etc/spamassassin/v341.pre changed [not included]
/etc/spamassassin/v342.pre changed [not included]
/etc/spamassassin/v400.pre changed [not included]

-- debconf information:
  spamassassin/upgrade/cancel: Continue
  spamassassin/upgrade/2.40:
  spamassassin/upgrade/2.42u: No
  spamassassin/upgrade/2.40w:
  spamassassin/upgrade/2.42m: No



Bug#1055451: prosody: SysVinit-Script references wrong LUA version

2023-11-06 Thread Patrik Schindler
Package: prosody
Version: 0.12.3-1
Severity: important

/etc/init.d/prosody refers to lua5.2 in several places. Because of this,
prosody won't stop when requested via initscript.

Bookworm has LUA 5.4.

Replacing each occurrence of lua5.2 with lua5.4 fixes this issue.

-- System Information:
Debian Release: 12.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-26-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages prosody depends on:
ii  adduser 3.134
ii  init-system-helpers 1.65.2
ii  libc6   2.36-9+deb12u3
ii  libicu7272.1-3
ii  libssl3 3.0.11-1~deb12u2
ii  lua-bitop [lua5.4-bitop]1.0.2-7
ii  lua-expat [lua5.4-expat]1.5.1-3
ii  lua-filesystem [lua5.4-filesystem]  1.8.0-3
ii  lua-sec [lua5.4-sec]1.2.0-2
ii  lua-socket [lua5.4-socket]  3.1.0-1+b1
ii  lua5.4  5.4.4-3
ii  ssl-cert1.1.2

Versions of packages prosody recommends:
ii  lua-event [lua5.4-event]  0.4.6-2+b1
ii  lua-unbound [lua5.4-unbound]  1.0.0-2
pn  lua5.4-readline   

Versions of packages prosody suggests:
pn  lua-dbi-mysql   
pn  lua-dbi-postgresql  
pn  lua-dbi-sqlite3 
ii  lua-zlib1.2-3

-- Configuration Files:
/etc/prosody/conf.avail/example.com.cfg.lua [Errno 13] Permission denied: 
'/etc/prosody/conf.avail/example.com.cfg.lua'
/etc/prosody/conf.avail/localhost.cfg.lua [Errno 13] Permission denied: 
'/etc/prosody/conf.avail/localhost.cfg.lua'
/etc/prosody/prosody.cfg.lua [Errno 13] Permission denied: 
'/etc/prosody/prosody.cfg.lua'

-- no debconf information



Bug#1051253: tnftp: Linked against OpenSSL despite no SSL functionality

2023-09-05 Thread Patrik Schindler
Package: tnftp
Version: 20200705-2
Severity: minor

Searching for an SSL-capable command line FTP client, I found no evidence that 
tnftp supports any
SSL functionality. Checked:
- manpage
- /usr/share/doc/tnftp

Despite this lack, it's linked against OpenSSL. Why?

Output of ldd:
linux-vdso.so.1 (0x7ffd66be6000)
libssl.so.1.1 => /lib/x86_64-linux-gnu/libssl.so.1.1 (0x7effce37)
libcrypto.so.1.1 => /lib/x86_64-linux-gnu/libcrypto.so.1.1 (0x7effce07c000)
libtinfo.so.6 => /lib/x86_64-linux-gnu/libtinfo.so.6 (0x7effce04d000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x7effcde79000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x7effcde57000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x7effcde51000)
/lib64/ld-linux-x86-64.so.2 (0x7effce485000)

I suggest removing the dependency.

-- System Information:
Debian Release: 11.7
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 
'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-25-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages tnftp depends on:
ii  libc6  2.31-13+deb11u6
ii  libssl1.1  1.1.1n-0+deb11u5
ii  libtinfo6  6.2+20201114-2+deb11u1

tnftp recommends no packages.

tnftp suggests no packages.

-- no debconf information



Bug#1030118: drbd-utils: Warning in initscript about missing /var/lib/linstor/loop_device_mapping

2023-01-31 Thread Patrik Schindler
Package: drbd-utils
Version: 9.15.0-1
Severity: normal

Note: I'm using sysv-rc, not systemd.

At startup, a warning is issued:
/etc/init.d/drbd: line 148: /var/lib/linstor/loop_device_mapping: No such file 
or directory

In fact, /var/lib/linstor doesn't exist on the machine in question.

Since drbd starts and ends without issue, I guess that directory is usually not 
needed.

Maybe it would be a good idea to add a check for the existence of the
file/directory in line 150 and do nothing if it doesn't exist.

if [ -f /var/lib/linstor/loop_device_mapping ]; then
...
fi

-- System Information:
Debian Release: 11.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-21-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages drbd-utils depends on:
ii  init-system-helpers  1.60
ii  libc62.31-13+deb11u5
ii  libgcc-s110.2.1-6
ii  libstdc++6   10.2.1-6
ii  lsb-base 11.1.0

Versions of packages drbd-utils recommends:
ii  bsd-mailx [mailx]  8.1.2-0.20180807cvs-2

Versions of packages drbd-utils suggests:
pn  heartbeat  



Bug#1021183: opendkim: Opendkim complaining insecure keys by assumption

2022-10-03 Thread Patrik Schindler
Hello David,

thanks for the quick response. After comparing your configuration to mine, I 
resolved the issue by trading possible security implications. See below.


Am 03.10.2022 um 15:15 schrieb David Bürgin :

> Can you include the steps to reproduce this? I don’t see this behaviour on my 
> installation (opendkim 2.11.0~beta2-5).

Will try to do so.

> Some of my configuration bits below:
> 
> $ grep -i -e keyfile -e userid -e umask -e socket -e requiresafekeys 
> /etc/opendkim.conf
> KeyFile /etc/dkimkeys/2020.private
> UserID  opendkim
> UMask   007
> Socket  local:/var/spool/postfix/opendkim/opendkim.sock

Mine is here.

UMask   002
Socket  local:/var/run/opendkim/opendkim.sock
RequireSafeKeys no
UserID  opendkim

> $ sudo ls -ld /etc/dkimkeys{,/2020.private}
> drwx-- 2 opendkim opendkim 4096 Aug 25  2021 /etc/dkimkeys
> -rw--- 1 opendkim opendkim 1679 Nov 20  2020 /etc/dkimkeys/2020.private

I do have multiple domains configured and thus use /etc/opendkim/domainname as 
base directory for keyfiles. Those belong to root:opendkim and are mode 2755.

-rw-r- 1 root opendkim 887 Oct 26  2015 
/etc/opendkim/pocnet.net/m201510.private
-rw-r--r-- 1 root opendkim 323 Oct 26  2015 /etc/opendkim/pocnet.net/m201510.txt

> $ sudo ls -ld /var/spool/postfix/opendkim{,/opendkim.sock}
> drwxr-x--- 2 opendkim opendkim 27 Sep 29 16:32 /var/spool/postfix/opendkim
> srwxrwx--- 1 opendkim opendkim  0 Sep 29 16:32 
> /var/spool/postfix/opendkim/opendkim.sock

-rw-r--r-- 1 root root 7 Oct  3 14:18 /var/run/opendkim/opendkim.pid
srwxrwxr-x 1 opendkim opendkim 0 Oct  3 14:18 /var/run/opendkim/opendkim.sock

> $ groups postfix | grep -o opendkim
> opendkim

# groups postfix | grep -o opendkim
opendkim


When I've configured opendkim for the first time, I tried to keep the key files 
belonging to root, so they couldn't be changed from opendkim itself — lessen 
attack surface.

After chown opendkim, and chmod 400 to the private key files, the warning 
message is — to be expected — gone, because there is no group access granted 
anymore. But there is a small — probably mostly theoretical — decrease in 
security, because key files now belong to the opendkim user, and a missing 
write bit can be overridden on owner match — having done this sometimes with vi 
and text files.

What's your opinion on that?

Thanks!

:wq! PoC



Bug#1021183: opendkim: Opendkim complaining insecure keys by assumption

2022-10-03 Thread Patrik Schindler
Package: opendkim
Version: 2.11.0~beta2-4
Severity: normal

Each and every time, Opendkim wakes up by work from Postfix, it creates
a log entry:

key data is not secure: .private is in group 133 which has multiple
users (e.g., "postfix")

This issue has been existing since 2015 (when I added DKIM to my mailflow) and
the according Debian release.

Opendkim has its own group and for proper access rights from postfix, added
postfix to the opendkim group. If I don't set this, I get

Oct  3 14:17:33 myhost postfix/smtpd[123464]: warning: connect to Milter 
service unix:/var/run/opendkim/opendkim.sock: Permission denied

Setting RequireSafeKeys to "no" not prevent the message from appearing, but
just prevents Opendkim from exiting because of this condition.

I think that group rights should not trigger this behavior, but instead only
when "other" is allowed to read the private key.

-- System Information:
Debian Release: 11.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-18-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages opendkim depends on:
ii  adduser  3.118
ii  dns-root-data2021011101
ii  init-system-helpers  1.60
ii  libbsd0  0.11.3-1
ii  libc62.31-13+deb11u4
ii  libdb5.3 5.3.28+dfsg1-0.8
ii  libldap-2.4-22.4.57+dfsg-3+deb11u1
ii  liblua5.1-0  5.1.5-8.1+b3
ii  libmemcached11   1.0.18-4.2
ii  libmilter1.0.1   8.15.2-22
ii  libopendbx1  1.4.6-15
ii  libopendkim112.11.0~beta2-4
ii  librbl1  2.11.0~beta2-4
ii  libssl1.11.1.1n-0+deb11u3
ii  libunbound8  1.13.1-1
ii  libvbr2  2.11.0~beta2-4
ii  lsb-base 11.1.0

Versions of packages opendkim recommends:
ii  opendkim-tools  2.11.0~beta2-4

opendkim suggests no packages.

-- Configuration Files:
/etc/dkimkeys/README.PrivateKeys [Errno 13] Permission denied: 
'/etc/dkimkeys/README.PrivateKeys'
/etc/opendkim.conf changed [not included]

-- no debconf information



Bug#619936: dlint fails when output of dig is changed via .digrc

2022-07-26 Thread Patrik Schindler
Hello,

this is a dupe for bug #991778.

:wq! PoC



Bug#991778: dlint: Dlint fails to find version number of dig

2022-07-26 Thread Patrik Schindler
Hello Paul,

Am 23.07.2022 um 02:06 schrieb Paul Wise :

>> Yes, unless you make dig less talkative with +nocmd.
> That looks like the cause of this problem indeed.

Thanks for confirmation!

> So the bug isn't likely to get fixed any time soon. If you have time to 
> maintain the package, salvaging it might be the best way forward.

I'll think about it. Seems I won't inherit a huge list of unresolvable bugs. My 
decision might be based upon the availability of a concise "what it takes to be 
a package maintainer" documentation.

> Otherwise please apply the fix locally for now.

I already did. :-)

Btw., I apparently created a second bug report, this one (991778) for the same 
issue. Browsing the still open bugs list  it appears, I've created a bug report 
for the same issue a decade before, 619936. And already provided a similar 
solution. Which didn't make it into the releases in between.

Maybe close one of them, marked as dupe?

:wq! PoC



Bug#1015953: netatalk: Please remove hard dependencies on Systemd and alloe compatibility with SysVrc

2022-07-24 Thread Patrik Schindler
Package: netatalk
Version: 3.1.12~ds-8
Severity: wishlist

Netatalk requires Systemd to be installed (and thus automatically be active).

Debian Bullyeye still supports SysVrc. Please (re-)enable compatibility with
SysVrc, and remove any hard dependencies on any particular Init System.

Most traditional server tasks (including Samba) do not impose this dependency.

-- System Information:
Debian Release: 11.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-16-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages netatalk depends on:
ii  init-system-helpers  1.60
ii  libacl1  2.2.53-10
ii  libavahi-client3 0.8-5
ii  libavahi-common3 0.8-5
ii  libc62.31-13+deb11u3
ii  libcrack22.9.6-3.4
ii  libcrypt11:4.4.18-4
ii  libdb5.3 5.3.28+dfsg1-0.8
pn  libdbus-glib-1-2 
ii  libevent-2.1-7   2.1.12-stable-1
ii  libgcrypt20  1.8.7-6
ii  libglib2.0-0 2.66.8-1
ii  libgssapi-krb5-2 1.18.3-6+deb11u1
ii  libkrb5-31.18.3-6+deb11u1
ii  libldap-2.4-22.4.57+dfsg-3+deb11u1
ii  libmariadb3  1:10.5.15-0+deb11u1
ii  libpam-modules   1.4.0-9+deb11u1
ii  libpam0g 1.4.0-9+deb11u1
ii  libssl1.11.1.1n-0+deb11u3
ii  libtalloc2   2.3.1-2+b1
ii  libtdb1  1.4.3-1+b1
pn  libtracker-sparql-2.0-0  
ii  libwrap0 7.6.q-31
ii  lsb-base 11.1.0
ii  netbase  6.3
ii  perl 5.32.1-4+deb11u2

Versions of packages netatalk recommends:
pn  avahi-daemon  
ii  cracklib-runtime  2.9.6-3.4
pn  dbus  
ii  lsof  4.93.2+dfsg-1.1
ii  procps2:3.3.17-5
ii  python3   3.9.2-3
pn  python3-dbus  
pn  tracker   

Versions of packages netatalk suggests:
ii  quota  4.06-1



Bug#991778: dlint: Dlint fails to find version number of dig

2022-07-22 Thread Patrik Schindler
Hello Paul,

sorry for letting you wait for so long. Had a lot of other, more important 
duties at hand.

Meanwhile I'm at Bullseye, and the issue persists.


> Am 04.09.2021 um 06:58 schrieb Paul Wise :
> 
> Control: severity -1 important
> Control: tags -1 + unreproducible
> 
> On Sun, 01 Aug 2021 19:00:34 +0200 Patrik Schindler wrote:
> 
>> On my Debian Buster system, dig fails to work with
>> 
>> ;; This program requires DiG version 2.1 or newer, which I cannot find.
> 
> I can't reproduce this in a Debian buster chroot.
> 
> Could you investigate more closely why it fails on your system?

I'm using a .digrc to minimize output for my "ordinary" user:

+ret=2 +noauthority +noadditional +noquestion +nostats +nocmd

For root (with no .digrc), the stock command still works.

>> Checking on this, I saw that the "ver" call in line 109 doesn't output a
>> version number anymore. So I changed that to dig -v.
> 
> The command there still works for me in buster:
> 
> $ dig localhost any | grep DiG | head -1 | sed -e 's/.*DiG \([0-9.]*\).*/\1/'
> 9.11.5

Yes, unless you make dig less talkative with +nocmd.

>> The following replacement for line 109 works for me.
>> 
>> ver=`dig -v 2>&1 | grep DiG | head -1 | sed -e 's/^DiG \([0-9.]\+\).*$/\1/'`
> 
> This seems like a much more correct way to check the version, so it should be 
> used instead anyway.

Thanks for confirming my opinion.

:wq! PoC



Bug#1014732: logrotate: daily mail "error: state file /var/lib/logrotate/status is world-readable and thus…"

2022-07-14 Thread Patrik Schindler
I observe the same behavior. 

Since there seems updated package being availabe, I apparently need to fix the 
logrotate script myself to not get mail each other day from multiple dozens of 
machines…

:wq! PoC



Bug#925473: Tomcat 9 requires Systemd

2022-06-21 Thread Patrik Schindler
Hello Thorsten,

Am 21.06.2022 um 07:27 schrieb Thorsten Glaser :

>> What is your opinion about staying current with security updates for this 
>> specifically crafted package?
> Not (that I can see) a security update, but I’ve updated it to match today’s 
> (yesterday’s?) sid upload.
> 
> The repository also has an RSS feed.

Thanks! Keep up the good work!

:wq! PoC



Bug#1013221: sendfile: /etc/cron.weekly job complains about deprecated tempfile

2022-06-19 Thread Patrik Schindler
Package: sendfile
Version: 2.1b.20080616-8
Severity: normal

I'm getting an email weekly:

/etc/cron.weekly/sendfile:
WARNING: tempfile is deprecated; consider using mktemp instead.

Replacing the recommended action seems to fix the issue.

-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-15-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages sendfile depends on:
ii  libc6 2.31-13+deb11u3
ii  libdpkg-perl  1.20.10
ii  libreadline8  8.1-1
ii  openbsd-inetd [inet-superserver]  0.20160825-5
ii  perl  5.32.1-4+deb11u2
ii  update-inetd  4.51

sendfile recommends no packages.

Versions of packages sendfile suggests:
pn  pgp-i  

-- Configuration Files:
/etc/cron.weekly/sendfile changed:
test -f /etc/sendfile.cf || exit 0
test -x /usr/bin/sendfile || exit 0
spooldir=$(sendfile -qW=spool)
cd $spooldir || exit 0
export LANG=C
maxage=$(grep '^deljunk' /etc/sendfile.cf)
test -n "$maxage" || exit 0
maxage=${maxage##*=}
maxage=${maxage//}
maxage=${maxage/ /}
pivot=$spooldir/pivot
touch -d now-${maxage}days $pivot
touch -d now-1day $pivot.yesterday
tmp=$(mktemp)
trap "rm -f $tmp $pivot $pivot.yesterday" INT EXIT
for i in *
do
   if [ -z "$(getent passwd "$i")" ]
   then
   continue
   fi
   echo -n > $tmp
   if [ -d "$i" ]
   then
   (
   cd "$i"
   for f in $(find -maxdepth 1 -name '*.h')
   do
 b=${f#./}
 b=${b%.h}
 FILE=
 SIZE=
 while read line
   do
   case $line in
   FILE*) FILE=${line#FILE  }
  ;;
   SIZE*) SIZE=${line#SIZE  }
  SIZE=${SIZE#* }
  ;;
   esac
 done < $f
 size=$(stat $b.d|grep Size)
 size=${size#*Size: }
 size=${size%% *}
 if [ $SIZE -gt $size ]
 then
 if [ $b.d -ot $pivot ]
 then
 logger -i -p daemon.info -t sendfile "sf_cleanup: Expired 
partial file $b for user $i"
 rm -f ${b}.{dh}
 else
 if [ $b.d -ot $pivot.yesterday ]
 then
 echo "Partial file $b will expire after $maxage days" 
>> $tmp
 fi
 fi
 fi
  done
  )
  if [ -s $tmp ]
  then
  (
  echo "Subject: Weekly SAFT Report"
  echo "From: SAFT Server "
  echo
  echo "The following incompletely received files have been found 
in the SAFT"
  echo "spool directory $spooldir:"
  echo
  cat $tmp
  ) | /usr/sbin/sendmail $i
  fi
  fi
done

/etc/logrotate.d/sendfile changed:
/var/spool/sendfile/*/log {
weekly
compress
rotate 7
missingok
nocreate
sharedscripts
}

/etc/profile.d/sendfile [Errno 2] No such file or directory: 
'/etc/profile.d/sendfile'

-- no debconf information



Bug#925473: Tomcat 9 requires Systemd

2022-06-13 Thread Patrik Schindler
Hello Thorsten,

a BIG and HUGE "THANK YOU" for your service to the community!


Am 12.06.2022 um 02:34 schrieb Thorsten Glaser :

> Let’s discuss enabling the repository first.

Worked. Thanks!

>> in other “alternative” versions of packages, so it can safely be added to 
>> most systems. The current set of packages for bullseye is:
> You wrote you need only tomcat and prefer pinning.

Is there another way?

> I’ve not had much success with pinning myself, other than to tell apt to 
> never install systemd at all, and to force specific versions for packages. 
> But maybe you figure it out and will share it for everyone?

Almost the same for me. Tomcat from your repro smells newer to apt-get, so this 
got installed. I know I should make sure that this is enforced but I'll 
postpone that to a later point in time.

:wq! PoC



Bug#1012546: clog: Please implement extended regular expressions with -E command line switch

2022-06-08 Thread Patrik Schindler
Package: clog
Version: 1.3.0-1+b1
Severity: wishlist
Tags: upstream

As said in the subject: Please implement extended regular expressions with -E
command line switch.

I've finished cleanup of some logcheck rules and wanted to use clog for adding
helpful colors. Unfortunately, I need to rework those rules from extended regex
to normal regex syntax. This essentially doubles work.

Thanks for considering.

-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-14-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages clog depends on:
ii  libc62.31-13+deb11u3
ii  libgcc-s1 [libgcc1]  10.2.1-6
ii  libstdc++6   10.2.1-6

clog recommends no packages.

clog suggests no packages.

-- no debconf information



Bug#925473: Tomcat 9 requires Systemd

2022-06-02 Thread Patrik Schindler
Hello Thorsten,

Am 02.06.2022 um 16:47 schrieb Thorsten Glaser :

> I’ll update the sysvinit branch and publish a new build of the package in my 
> personal APT repository then (I’ve not done so for a while since I’m 
> currently not in a Java™ project). If that’s enough for you that
> is — I can sign checksums with my Debian Developer PGP key for you to verify.

Thank you *very* much! Does this also resolve the packages' hard dependency on 
systemd?

What is your opinion about staying current with security updates for this 
specifically crafted package?

>> May I kindly ask for a short summary about the state of affairs?
> Emmanuel blocks this because he does not like adduser, the Debian gold 
> standard for adding users to the system. Emmanuel is the primary pakkage 
> maintainer for tomcat9.

I see. Thanks for the explanation.

Is there some higher instance within the Debian project you can call up for 
probably conciliating this issue? Or might a fork to tomcat9-sysvinit be 
feasible? Would such a fork be accepted into the main apt archives?

Thank you!

:wq! PoC



Bug#925473: Tomcat 9 requires Systemd

2022-06-02 Thread Patrik Schindler
Hello,

long discussion, apparently.

Me also is highly interested a current tomcat not relying on systemd but also 
working with sysvinit. Today, we're at Deb 11 Bullseye, and the issue 
apparently has not been sorted out.

May I kindly ask for a short summary about the state of affairs?

I don't want to engage in a heated discussion about pros and cons of init 
systems. But I think as long as Debian offers sysvinit, I feel that packages 
requiring boot services should not force the user to use a certain init system.

:wq! PoC



Bug#1012191: tzdata: /usr/share/zoneinfo/leap-seconds.list will expire on 2022-06-28 in Debian Stable 11.x/Bullseye

2022-06-01 Thread Patrik Schindler
This bug currently appears also with Bullseye on some dozens of installs for me.



Bug#984789: needrestart: Microcode warnings without using Systemd

2022-05-17 Thread Patrik Schindler
Hello,

thanks a lot!!

:wq! PoC



Bug#991299: Default download timeout short, retrying download endlessly

2021-09-20 Thread Patrik Schindler
Hello,

had the same issue yesterday also. Increased the timeout value to two minutes, 
which helped. Maybe this should be changed by an update through ucf: Most users 
install clamav and don't care anymore. I'm sure the load for the CDN through 
repeated tries not being finished in 30 seconds is substantial.

Especially a backoff time seems to be desirable to not run into blocked state 
with the accompanying cool-down from the CDN.

I'm not sure if this belongs here or is a sole upstream issue.

:wq! PoC



Bug#690788: freshclam won't resume (large) partial downloads.

2021-09-20 Thread Patrik Schindler
Hello,

there was negligible progress upstream with the requested feature. I guess, 
this will never happen, because it didn't happen in like almost a decade. Thus 
I recommend to close this issue.

See also Bug #991299 for a related issue.

Mit freundlichen Grüßen
Patrik Schindler


Patrik Schindler
Leiter Infrastruktur

[https://www.mathpeter.com/sites/default/files/styles/asset_image_full/public/assets/images/peter-logo-digital-gross-rgb.jpg?itok=OpIvJDVS]


Freiburger Straße 19
79258 Hartheim
Tel.: +49 7633 92248-20
Fax: +49 7633 92248-90
eMail: pschind...@mathpeter.com
Website: www.mathpeter.com

 Bereit für den nächsten Schritt?

[Cloud Gaming]

Mehr Informationen unter 
Remote-Gaming<https://www.mathpeter.com/products/remote_gaming>. Lesen Sie auch 
unsere 
Nutzungsbedingungen<https://www.mathpeter.com/products/remote-gaming-terms>.

 Die in dieser eMail und den dazugehörigen Anhängen (zusammen die Nachricht) 
enthaltenen Informationen sind nur für den Adressaten bestimmt und können 
vertrauliche und/oder rechtlich geschützte Informationen enthalten. Sollten Sie 
die Nachricht irrtümlich erhalten haben, löschen Sie die Nachricht bitte und 
benachrichtigen Sie den Absender, ohne die Nachricht zu kopieren oder zu 
verteilen oder ihren Inhalt an andere Personen weiterzugeben.

Ausser bei Vorsatz oder grober Fahrlässigkeit schliessen wir jegliche Haftung 
für Verluste oder Schäden aus, die durch virenbefallene Software oder eMails 
verursacht werden.



Bug#991778: dlint: Dlint fails to find version number of dig

2021-08-01 Thread Patrik Schindler
Package: dlint
Version: 1.4.0-8
Severity: grave
Tags: patch
Justification: renders package unusable

On my Debian Buster system, dig fails to work with

;; This program requires DiG version 2.1 or newer, which I cannot find.

Checking on this, I saw that the "ver" call in line 109 doesn't output a
version number anymore. So I changed that to dig -v.

Next, sed was unable to extract a meaningful version number from what dig -v
provided, so I changed the sed statement in the same line accordingly.

The following replacement for line 109 works for me.

ver=`dig -v 2>&1 | grep DiG | head -1 | sed -e 's/^DiG \([0-9.]\+\).*$/\1/'`

My changes might introduce non-backwards compatible changes, though.

-- System Information:
Debian Release: 10.10
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-17-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages dlint depends on:
ii  dnsutils  1:9.11.5.P4+dfsg-5.1+deb10u5
ii  perl  5.28.1-6+deb10u1

dlint recommends no packages.

dlint suggests no packages.

-- no debconf information



Bug#989354: smokeping: Classical initscript (Sysvinit) fails to stop daemon

2021-06-01 Thread Patrik Schindler
Package: smokeping
Version: 2.7.3-2
Severity: normal
Tags: patch

Hello,

I know that Debian comes with Systemd per default, but Sysvinit is still
included as package. Therefore, I kindly ask you to please apply the following
fix.

--- smokeping   2021-06-01 18:10:36.047712220 +0200
+++ /etc/init.d/smokeping   2021-06-01 18:11:09.536460880 +0200
@@ -128,7 +128,7 @@
 log_daemon_msg "Shutting down $DESC" $NAME
 
 set +e
-start-stop-daemon --oknodo --stop --retry 3 --quiet --pidfile $PIDFILE 
--exec $DAEMON --signal 15
+start-stop-daemon --oknodo --stop --retry 3 --pidfile $PIDFILE --user 
$DAEMON_USER --signal 15
 STATUS=$?
 set -e

Thanks!

Note: This report was generated on the same Debian Release as the initial
target machine, but without Smokeping installed.

:wq! PoC

-- System Information:
Debian Release: 10.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-16-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages smokeping depends on:
ii  adduser 3.118
ii  debianutils 4.8.6.1
pn  fping   
ii  libcgi-fast-perl1:2.13-1
ii  libconfig-grammar-perl  1.12-2
ii  libdigest-hmac-perl 1.03+dfsg-2
pn  libjs-cropper   
pn  libjs-prototype 
pn  libjs-scriptaculous 
ii  librrds-perl1.7.1-2
ii  libsnmp-session-perl1.14~git20130523.186a005-4
ii  liburi-perl 1.76-1
ii  libwww-perl 6.36-2
ii  lsb-base10.2019051400
ii  perl5.28.1-6+deb10u1
ii  postfix [mail-transport-agent]  3.4.14-0+deb10u1
ii  ucf 3.0038+nmu1

Versions of packages smokeping recommends:
ii  apache2 [httpd-cgi]  2.4.38-3+deb10u4
ii  dnsutils 1:9.11.5.P4+dfsg-5.1+deb10u5
pn  echoping 
ii  libsocket6-perl  0.29-1+b1

Versions of packages smokeping suggests:
ii  curl   7.64.0-4+deb10u2
pn  libauthen-radius-perl  
ii  libio-socket-ssl-perl  2.060-3
ii  libnet-dns-perl1.19-1
pn  libnet-ldap-perl   
ii  libnet-telnet-perl 3.04-1
ii  openssh-client 1:7.9p1-10+deb10u2



Bug#443700: monitor a path recursively

2021-05-26 Thread Patrik Schindler
Hello,

I'm not sure if this is already done. In 0.5.12-1+deb10u1, when I watch the 
root of my home directory with IN_CLOSE_WRITE,IN_MOVED_TO,IN_ONLYDIR, changes 
in subdirectories trigger a run of the associated script.

Personally, I'd prefer to have an additional flag IN_RECURSIVE if a directory 
is to be watched in it's entire subtree, or only changes to the directory 
(inode) itself, which is the opposite of what the initial bug reporter was 
asking for.

Should I open a new feature request?

:wq! PoC



Bug#896926: needrestart: false positive: microcode warnings after CPU upgrade

2021-03-08 Thread Patrik Schindler
Hello,

the µCode-Check fails if there is no iucode-tool installed at all, which I 
would not expect. Without the tool, there can be no updates beside what the 
machine's BIOS provides and checking for that is out of scope for needrestart. 
I'd suggest to skip firmware processing completely if there's no iucode-tool 
installed.

:wq! PoC



Bug#984789: needrestart: Microcode warnings without using Systemd

2021-03-08 Thread Patrik Schindler
Package: needrestart
Version: 3.4-5
Severity: minor

Hello,

I'm getting the message "Failed to check for processor microcode upgrades." on
vmware virtualized machines.  Looking on the code, there is a check for $is_vm,
but it only tries to use systemd-detect-virt, which isn't available on my
system because I don't use systemd.

libimvirt-perl would provide a convenient way to not depend on systemd at all.
Here, it's installed automatically, because I use apt-dater, and apt-dater-host
relies on libimvirt-perl. I suggest to use the code provided in
/usr/bin/apt-dater-host if systemd-detect-virt can't be found. This is most
likely the most easy solution. Of course, package-dependencies need to be
updated also.

Note: Systemd is *not* mandatory. Even for Debian 10 most "server" packages
behave fine with SysVinit.

-- System Information:
Debian Release: 10.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages needrestart depends on:
ii  binutils   2.31.1-16
ii  dpkg   1.19.7
ii  gettext-base   0.19.8.1-9
ii  libintl-perl   1.26-2
ii  libmodule-find-perl0.13-1
ii  libmodule-scandeps-perl1.27-1
ii  libproc-processtable-perl  0.56-1
ii  libsort-naturally-perl 1.03-2
ii  libterm-readkey-perl   2.38-1
ii  perl   5.28.1-6+deb10u1
ii  xz-utils   5.2.4-1

Versions of packages needrestart recommends:
ii  sysvinit-core  2.93-8

Versions of packages needrestart suggests:
pn  iucode-tool  
pn  needrestart-session | libnotify-bin  

-- no debconf information



Bug#748778: apt-dater: please add a reboot command

2020-12-07 Thread Patrik Schindler
Hello,

+1 from me! Most useful (but dangerous in a way).

:wq! PoC



Bug#976726: apt-dater: Apt-dater unexpectedly closes finished TMUX sessions

2020-12-07 Thread Patrik Schindler
Package: apt-dater
Version: 1.0.4-2
Severity: normal

Hello,

when an update has been completed by apt-dater and I select a particular host
from the "Sessions" group, some unrelated tmux sessions in the same or other
host-group within "Sessions" will be closed also. Most likely, the affected
sessions still had a screen from needrestart telling to reboot for a kernel
update. It does not seem to happen with needrestart showing just a list of
programs to restart. I'm not sure if it happens with truely "finished"
sessions, or sessions asking for "Ignore/Less/Connect" also.

I also observe the mentioned behavior, on two different management-domains
(private and company). Im using a shared setup (used by me alone, though)
which worked all the way from Debian 8 until now. The mentioned behavior
started with the Update auf Debian 10. So, it's not possible to check all
screens one by one for messages as it was in Debian 9.

-- System Information:
Debian Release: 10.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-13-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages apt-dater depends on:
ii  libc6   2.28-10
ii  libglib-perl3:1.329-1
ii  libglib2.0-02.58.3-2+deb10u2
ii  libncursesw66.1+20181013-2+deb10u2
ii  libpopt01.16-12
ii  libtcl8.6   8.6.9+dfsg-2
ii  libtinfo6   6.1+20181013-2+deb10u2
ii  libxml-writer-perl  0.625-1
ii  libxml2 2.9.4+dfsg1-7+deb10u1
ii  lockfile-progs  0.1.18
ii  openssh-client  1:7.9p1-10+deb10u2
ii  perl5.28.1-6+deb10u1
ii  procmail3.22-26
ii  tmux2.8-3

apt-dater recommends no packages.

Versions of packages apt-dater suggests:
ii  apt-dater-host  1.0.1-1
pn  xsltproc

-- Configuration Files:
/etc/apt-dater/hosts.xml changed [not included]

-- no debconf information



Bug#976725: apt-dater: Apt-dater reports fail2ban restart as error

2020-12-07 Thread Patrik Schindler
Package: apt-dater
Version: 1.0.4-2
Severity: normal

Hello,

when apt-dater is used in conjunction with needrestart, and needrestart restarts
fail2ban or other programs containing similar catchwords in their name, an error
will be reported with the usual choice of ignore/less/connect.

Perhaps it could make sense to make the list of error conditions configurable
with regular expressions to counterfeit this behavior?

-- System Information:
Debian Release: 10.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-13-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages apt-dater depends on:
ii  libc6   2.28-10
ii  libglib-perl3:1.329-1
ii  libglib2.0-02.58.3-2+deb10u2
ii  libncursesw66.1+20181013-2+deb10u2
ii  libpopt01.16-12
ii  libtcl8.6   8.6.9+dfsg-2
ii  libtinfo6   6.1+20181013-2+deb10u2
ii  libxml-writer-perl  0.625-1
ii  libxml2 2.9.4+dfsg1-7+deb10u1
ii  lockfile-progs  0.1.18
ii  openssh-client  1:7.9p1-10+deb10u2
ii  perl5.28.1-6+deb10u1
ii  procmail3.22-26
ii  tmux2.8-3

apt-dater recommends no packages.

Versions of packages apt-dater suggests:
ii  apt-dater-host  1.0.1-1
pn  xsltproc

-- Configuration Files:
/etc/apt-dater/hosts.xml changed [not included]

-- no debconf information



Bug#812871: Some configured hosts are not displayed until any host is refreshed

2020-12-07 Thread Patrik Schindler
Hello,

I also observe the mentioned behavior, on two different management-domains 
(private and company). What’s more, when starting apt-dater, the group for 
„refresh required“ does not show a + sign: It’s also empty. Im using a shared 
setup (used by me alone, though) which worked all the way from Debian 8 until 
now. The mentioned behavior started with the Update auf Debian 10.

HTH.

:wq! PoC



Bug#959860: initscripts: Please provide shutdown-equivalent to rc.local

2020-05-06 Thread Patrik Schindler
Package: initscripts
Version: 2.93-8
Severity: wishlist
Tags: patch

Please integrate this patch to have stuff done at system shutdown.

My reason to use it is a hercules instance in a screen session, started by cron
@reboot for a certain user. Doing this completely in an initscript is hard, but
initiating an orderly shutdown to hercules at the right time is easy.

--- rc.local.orig   2020-05-06 10:50:43.230690277 +0200
+++ rc.local2020-05-06 10:45:17.252094001 +0200
@@ -24,6 +24,16 @@
fi
 }
 
+do_stop() {
+   if [ -x /etc/rc.local.shutdown ]; then
+   [ "$VERBOSE" != no ] && log_begin_msg "Running local boot 
scripts (/etc/rc.local)"
+   /etc/rc.local.shutdown
+   ES=$?
+   [ "$VERBOSE" != no ] && log_end_msg $ES
+   return $ES
+   fi
+}
+
 case "$1" in
 start)
do_start
@@ -32,10 +42,14 @@
 echo "Error: argument '$1' not supported" >&2
 exit 3
 ;;
-stop|status)
+status)
 # No-op
 exit 0
 ;;
+stop)
+   do_stop
+exit 0
+;;
 *)
 echo "Usage: $0 start|stop" >&2
 exit 3

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages initscripts depends on:
ii  coreutils   8.30-3
ii  debianutils 4.8.6.1
ii  lsb-base10.2019051400
ii  mount   2.33.1-0.1
ii  sysv-rc 2.93-8
ii  sysvinit-utils  2.93-8

Versions of packages initscripts recommends:
ii  e2fsprogs  1.44.5-1+deb10u3
ii  psmisc 23.2-1

initscripts suggests no packages.

-- Configuration Files:
/etc/default/tmpfs changed [not included]

-- no debconf information



Bug#959179: oidentd: Oidentd should not try to drop privileges when run in inetd mode

2020-04-30 Thread Patrik Schindler
Package: oidentd
Version: 2.3.2-1
Severity: wishlist

Hello,

when run with inetd with an user != root, oidentd refuses to run:
Apr 30 14:50:54 xxx oidentd[29962]: Fatal: Failed to drop privileges (kernel)

ident   stream  tcp nowait  oidentd/usr/sbin/tcpd  oidentd -i -I

I think, dropping of privileges should not be tried when already running within
a different user account.

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages oidentd depends on:
ii  adduser  3.118
ii  iproute2 4.20.0-2
ii  libc62.28-10
ii  libcap-ng0   0.7.9-2
ii  libnetfilter-conntrack3  1.0.7-1
ii  lsb-base 10.2019051400
ii  net-tools201407242107-wheezy
ii  netbase  5.6

oidentd recommends no packages.

oidentd suggests no packages.

-- Configuration Files:
/etc/default/oidentd changed:
exit 0
OIDENT_OPTIONS="-mf"
OIDENT_USER=oident
OIDENT_GROUP=oident
OIDENT_BEHIND_PROXY=no


-- no debconf information



Bug#958864: at: Please add command line of the job to the output mail

2020-04-25 Thread Patrik Schindler
Package: at
Version: 3.1.23-1
Severity: wishlist

When typing a simple command at the at prompt and the command fails, I probably
need to type it again. Would be nice to have it in the mail ready for
copy-paste.

This could also be a solution for bug #244533.

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages at depends on:
ii  libc6   2.28-10
ii  libfl2  2.6.4-6.2
ii  libpam-runtime  1.3.1-5
ii  libpam0g1.3.1-5
ii  libselinux1 2.8-1+b1
ii  lsb-base10.2019051400

Versions of packages at recommends:
ii  postfix [mail-transport-agent]  3.4.8-0+10debu1

at suggests no packages.

-- Configuration Files:
/etc/at.deny [Errno 13] Permission denied: '/etc/at.deny'

-- no debconf information



Bug#958863: at: Please add new queue for running one job after the other

2020-04-25 Thread Patrik Schindler
Package: at
Version: 3.1.23-1
Severity: wishlist

Hello,

I'd love to see a new queue added to at but instead of depending on start time,
or load-avg (batch), submitted jobs just run one after the other.

Sometimes, jobs simply don't create "enough" load, so batch jobs can run in
parallel without any issue. Sometimes, it's desirable to let one job finish
before starting the next.

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages at depends on:
ii  libc6   2.28-10
ii  libfl2  2.6.4-6.2
ii  libpam-runtime  1.3.1-5
ii  libpam0g1.3.1-5
ii  libselinux1 2.8-1+b1
ii  lsb-base10.2019051400

Versions of packages at recommends:
ii  postfix [mail-transport-agent]  3.4.8-0+10debu1

at suggests no packages.

-- no debconf information



Bug#512087: Instead of complicated trigger logic, maybe run updates in background?

2020-04-17 Thread Patrik Schindler
Hello,

see #956968. Possibly a reasonable work-around against too much waiting time?

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc



Bug#926936: systemd-udevd PID file name produces false positive with rkhunter for XORDDOS malware

2020-04-17 Thread Patrik Schindler
Hello,

I had the same issue and configured an exception in rkhunter.conf.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc



Bug#956968: rkhunter: Run rkhupd.sh in background, if possible

2020-04-17 Thread Patrik Schindler
Package: rkhunter
Version: 1.4.6-5
Severity: wishlist
Tags: patch

Hello,

I suggest to run rkhupd.sh in background via at(1) (if installed) and if
PKGMGR=DPKG is set in config file, to lessen waiting time after installs.

Proposed Change is in /etc/apt/apt.conf.d/90rkhunter:

DPkg::Post-Invoke { "if [ -x /usr/bin/rkhunter ] && grep -qiE 
'^APT_AUTOGEN=.?(true|yes)' /etc/default/rkhunter; then if [ -x /usr/bin/batch 
] && grep -qiE '^PKGMGR=DPKG$' /etc/rkhunter.conf; then echo 
'/usr/share/rkhunter/scripts/rkhupd.sh' |batch 2>/dev/null && echo 'Running 
rkhupd in background.'; else /usr/share/rkhunter/scripts/rkhupd.sh; fi; fi"; };

Thanks!

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages rkhunter depends on:
ii  binutils   2.31.1-16
ii  debconf [debconf-2.0]  1.5.71
ii  file   1:5.35-4+deb10u1
ii  lsof   4.91+dfsg-1
ii  net-tools  201407242107-wheezy
ii  perl   5.28.1-6
ii  ucf3.0038+nmu1

Versions of packages rkhunter recommends:
ii  bsd-mailx [mailx]   8.1.2-0.20180807cvs-1
ii  curl7.64.0-4+deb10u1
ii  e2fsprogs   1.44.5-1+deb10u3
ii  iproute24.20.0-2
ii  postfix [mail-transport-agent]  3.4.8-0+10debu1
ii  unhide  20130526-3+deb10u1
pn  unhide.rb   
ii  wget1.20.1-1.1

Versions of packages rkhunter suggests:
ii  liburi-perl 1.76-1
ii  libwww-perl 6.36-2
pn  powermgmt-base  

-- Configuration Files:
/etc/apt/apt.conf.d/90rkhunter changed [not included]
/etc/logrotate.d/rkhunter changed [not included]
/etc/rkhunter.conf changed [not included]

-- debconf information excluded



Bug#902653: unattended-upgrades: Please do not auto enable upon install

2019-10-03 Thread Patrik Schindler
Hello,

my opinion: If I install something by hand I do so because I want it's 
functionality. From this POV, it should be enabled. After all, if I install a 
package which does some "magic" I don't install and forget but take my time to 
review it's config files to understand how it works. If I don't want it's 
functionality (yet), I simply could remove or don't install in the first place.
If it's installed by default on new installs, it maybe should be disabled to 
not do something unexpected. Since I don't do new installs but just clone a 
master install, my opinion isn't too relevant, maybe.
It could be a simple solution to just print a message text about the status 
(enabled/disabled, reflecting probably existing conffile content) in postinst. 
I've seen other packages doing so do direct the user that he has to take 
further measures.

Sites with many servers and some kind of automation (ansible or something 
similar) IMO should test new packages in a sandbox system before rollout to 
many machines automatically and having interesting surprises afterwards. At 
least, I'd consider this real-world practice.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc



Bug#940586: ghostscript: Please add gpcl in addition to gs

2019-09-17 Thread Patrik Schindler
Package: ghostscript
Version: 9.26a~dfsg-0+deb9u5
Severity: wishlist

Please add gpcl as package to Debian, probably as backport available for oder
releases, too. Building gpcl with the debian-directory from ghostscript yields
file overlaps, because of files both programs use. Diversions could be a
solution.

Maybe it could be a better idea to split gs into ghostscript-common and
ghostscript-gs-bin and ghostscript-gpcl-bin to prevent unnecessary disk space
allocation through duplicate files.

-- System Information:
Debian Release: 9.11
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-11-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages ghostscript depends on:
ii  debconf [debconf-2.0]  1.5.61
ii  libc6  2.24-11+deb9u4
ii  libgs9 9.26a~dfsg-0+deb9u5

Versions of packages ghostscript recommends:
ii  gsfonts  1:8.11+urwcyr1.0.7~pre44-4.3

Versions of packages ghostscript suggests:
pn  ghostscript-x  

-- no debconf information



Bug#930474: libemail-valid-perl: Fails to correctly verify address with just angle brackets

2019-06-13 Thread Patrik Schindler
Package: libemail-valid-perl
Version: 1.202-1
Severity: important

Module verifies

"Patrik Schindler" 

as correct but fails to verify



as correct. Email::Valid->details contains "rfc822". I'm not sure if an address
without comments but with brackets is violating RFC822, though.

-- System Information:
Debian Release: 9.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-9-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libemail-valid-perl depends on:
ii  libmailtools-perl   2.18-1
ii  libnet-dns-perl 1.07-1
ii  libnet-domain-tld-perl  1.75-1
ii  netbase 5.4
ii  perl5.24.1-3+deb9u5

libemail-valid-perl recommends no packages.

libemail-valid-perl suggests no packages.

-- no debconf information



Bug#859874: Reproducible on stretch?

2019-06-03 Thread Patrik Schindler
Hello,

thank you for your patience.

Unfortunately I didn't record details to my test setup, so I created a new 
Tunes Library on Stretch and tested to access it. I get frequent messages that 
the iTunes Library could not be saved.

No messages in log.smbd, though.

What do you need me to do to provide further information?

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc



Bug#362146: Still relevant?

2019-01-16 Thread Patrik Schindler
Hello,

I don't remember seeing such values in Deb 7, 8, 9, all amd64. Is this entry 
still relevant or maybe close it?

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE



Bug#620179: Sorted Entries

2019-01-16 Thread Patrik Schindler
Hello,

sorted entries are still not available with Sysstat 11.4.3-2 in Debian Stretch.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE



Bug#906993: rsh-redone-client: Please include rexec

2018-08-25 Thread Patrik Schindler
Hello Guus,

Am 25.08.2018 um 16:29 schrieb Guus Sliepen :

> Hello Patrik, rsh-redone was made in a different era where computers were 
> slow and encryption was expensive.

I encounter this reasoning from time to time in different contexts. With all 
due respect for the hard work of package maintainers and devs: I think, this 
decision should be left to the user. My personal reason: I'd like to see a 
regular packaged rexec(d) for talking to my old AS/400 which has no 
cryptographic options.

But I accept your reply and will go forward to create my own rexec(d) packages 
then.

> rsh-redone is in maintenance mode; I will not add any more functionality to 
> it.

Is there any way to mark this package accordingly?

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE



Bug#906994: rsh-redone-server: Please include in.rexecd

2018-08-22 Thread Patrik Schindler
Package: rsh-redone-server
Version: 85-2+b1
Severity: wishlist

Please include in.rexecd into this package.

-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-7-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages rsh-redone-server depends on:
ii  libc6 2.24-11+deb9u3
ii  libpam0g  1.1.8-3.6
ii  openbsd-inetd [inet-superserver]  0.20160825-2

rsh-redone-server recommends no packages.

rsh-redone-server suggests no packages.

-- no debconf information



Bug#906993: rsh-redone-client: Please include rexec

2018-08-22 Thread Patrik Schindler
Package: rsh-redone-client
Version: 85-2+b1
Severity: wishlist

Please include rexec command.

-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-7-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages rsh-redone-client depends on:
ii  libc6  2.24-11+deb9u3

Versions of packages rsh-redone-client recommends:
ii  openssh-client [rsh-client]  1:7.4p1-10+deb9u3
ii  rsh-client   0.17-17+b1

rsh-redone-client suggests no packages.

-- no debconf information



Bug#902671: uucp: Wrong Statement in Manpage of uucp

2018-06-29 Thread Patrik Schindler
Package: uucp
Version: 1.07-23+b1
Severity: minor

The manpage to uucp(1) states:
-C, --copy
Copy local source files to the spool directory. This is the default.

This is wrong. The default is apparently -c (--nocopy).

-- System Information:
Debian Release: 9.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-6-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages uucp depends on:
ii  bsd-mailx [mailx] 8.1.2-0.20160123cvs-4
ii  cron  3.0pl1-128+deb9u1
ii  cu1.07-23+b1
ii  libc6 2.24-11+deb9u3
ii  libpam-runtime1.1.8-3.6
ii  libpam0g  1.1.8-3.6
ii  logrotate 3.11.0-0.1
ii  netbase   5.4
ii  openbsd-inetd [inet-superserver]  0.20160825-2

Versions of packages uucp recommends:
ii  postfix  3.1.8-0+deb9u1

uucp suggests no packages.

-- Configuration Files:
/etc/cron.d/uucp changed [not included]
/etc/cron.daily/uucp changed [not included]
/etc/uucp/call [Errno 13] Permission denied: '/etc/uucp/call'
/etc/uucp/dial changed [not included]
/etc/uucp/expire changed [not included]
/etc/uucp/passwd [Errno 13] Permission denied: '/etc/uucp/passwd'
/etc/uucp/port changed [not included]

-- debconf information excluded



Bug#816411: Etherwake: a configuration file would be helpful

2018-04-25 Thread Patrik Schindler
Hello,

you are right when considering all possible command line options to be 
configurable.

When it comes only to setting a default interface, I'd opt for just checking an 
appropriate environment variable. This is much easier to implement.

Third option is to use shell aliasing like
etherwake='etherwake -i ens192'
and leave etherwake code as is.

@Pierre: If you're interested in a patch for the envvar-way, let me know.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE



Bug#797372: no reason for root-only

2018-04-25 Thread Patrik Schindler
Hello,

kernel interfaces for accessing raw sockets may only be accessed by root.

As a fix, I recommend chmod'ing etherwake as suid, remove excess other-rights 
and restrict usage to group members of whatever group you configure. The latter 
is for reducing the possibility of security implications regarding etherwake 
and suid.

@Pierre: I can write a patch against postinst if you want. Let me know.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE



Bug#861626: [Pkg-samba-maint] Bug#861626: libpam-smbpass: Please add manpage for pam_smbpass.so

2017-05-01 Thread Patrik Schindler
Hello Jelmer,

thanks for the speedy response.

Am 01.05.2017 um 22:42 schrieb Jelmer Vernooij :

> Please note that this is unlikely to happen, as pam_smbpass.so has been 
> removed in newer versions of Samba.

Do you know details about why pam_smbpass.so has been removed?

Otherwise you may close this bug.

Thank you!

:wq! PoC



Bug#861626: libpam-smbpass: Please add manpage for pam_smbpass.so

2017-05-01 Thread Patrik Schindler
Package: libpam-smbpass
Version: 2:4.2.14+dfsg-0+deb8u5
Severity: wishlist

Please add a manpage for pam_smbpass, like with any other pam_*-modules.

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages libpam-smbpass depends on:
ii  dpkg1.17.27
ii  libc6   2.19-18+deb8u7
ii  libpam-runtime  1.1.8-3.1+deb8u2
ii  libpam0g1.1.8-3.1+deb8u2
ii  libtalloc2  2.1.2-0+deb8u1
ii  samba-common2:4.2.14+dfsg-0+deb8u5
ii  samba-libs  2:4.2.14+dfsg-0+deb8u5

libpam-smbpass recommends no packages.

Versions of packages libpam-smbpass suggests:
ii  samba  2:4.2.14+dfsg-0+deb8u5

-- no debconf information



Bug#859874: samba-vfs-modules: Error 13005 Accessing Share with OS X 10.5.8/iTunes 10.6.3 when enabling vfs_fruit

2017-04-08 Thread Patrik Schindler
Package: samba-vfs-modules
Version: 2:4.2.14+dfsg-0+deb8u5
Severity: normal

I learned about vfs_fruit lately since it promises better integration with Macs.

Unfortunately, when Launching iTunes 10.6.3 within PPC Pac OS X 10.5.8, iTunes
complains about error 13005 while opening the iTunes Library. The only option
is to quit iTunes.

Remounting the same volume without vfs_fruit makes iTunes behave as expected.

Yes, these this is rather old software but I'm utilizing an old Mac as a
decent Music player for my living room.

Excerpt from smb.conf:

[global]
# Filesystem Settings
access based share enum = yes
acl map full control = no
client min protocol = NT1
default service = homes
delete readonly = yes
delete veto files = yes
guest ok = no
hide special files = yes
inherit permissions = yes
mangled names = no
map archive = no
map hidden = no
map system = no
read only = no
server signing = auto
unix charset = UTF8
use sendfile = yes
veto files = /.AppleDouble/.AppleDesktop/Network Trash Folder/
write cache size = 4096

[archiv]
comment = Archiv
path = /volumes/archiv
read only = no
valid users = @users
#vfs objects = fruit
#fruit:locking = netatalk
#fruit:copyfile = yes

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages samba-vfs-modules depends on:
ii  libaio1 0.3.110-1
ii  libattr11:2.4.47-2
ii  libbsd0 0.7.0-2
ii  libc6   2.19-18+deb8u7
ii  libtalloc2  2.1.2-0+deb8u1
ii  libtdb1 1.3.6-0+deb8u1
ii  libtevent0  0.9.28-0+deb8u1
ii  samba-libs  2:4.2.14+dfsg-0+deb8u5

samba-vfs-modules recommends no packages.

samba-vfs-modules suggests no packages.

-- no debconf information



Bug#61210: Comment

2017-04-03 Thread Patrik Schindler
Hello,

Perhaps this is a sight duplicate to Bug 36019?

:wq! PoC



Bug#36019: Status of Hooks for adduser/deluser?

2017-04-03 Thread Patrik Schindler
Hello,

since there’s only infrequent updates on this one, I’d like to ask if there has 
been any progress on the topic?

:wq! PoC



Bug#613926: marked as done (debian-goodies: Please provide program to check packages for installability)

2017-02-27 Thread Patrik Schindler
Hello,

Am 27.02.2017 um 21:42 schrieb Axel Beckert :

> This bug was tagged wrongly as there never was and still is no such
> tool in debian-goodies. Hence declaring that it is only present in
> squeeze does not make sense. Hence reopening.

You may close this wishlist-item as I discovered that orphaner from the 
deborphan package is an almost perfect subsitute to what I had wished in the 
first place.

> I though think the package list in question can be generate with some
> "aptitude search" plus some options.

Thank you. I personally refrain from aptitude because I’m very fluent with 
apt-cache/apt-get. Plus, major upgrades should be made with apt-get as the docs 
say. So I deinstalled aptitude entirely. But again, thanks for your examples!

:wq! PoC



Bug#855219: ghostscript: Please add gspcl

2017-02-23 Thread Patrik Schindler
Hello Jonas,

Am 23.02.2017 um 19:51 schrieb Jonas Smedegaard :

>> So I may look forward for a gpcl package for unstable in a not all to 
>> far future?
> Yes.

Thank you very much!

> ...and if at some point in time you realize that "not all too far" have 
> different meaning for me than for you, then feel free to ping this 
> bugreport - or roll up your sleeves and join the packaging effort!

Since it will for sure not make it to testing, I don’t expect anything before 
unstable becomes the new testing. Of course there is a short cut called 
backports… ;-)

I’m still not seasoned enough in packaging such a complex beast like gs or 
gpcl. in fact, I’m glad if I can do proper packaging for my planned PDF-Tool.

:wq! PoC



Bug#855219: ghostscript: Please add gspcl

2017-02-23 Thread Patrik Schindler
Hello Jonas,

Am 23.02.2017 um 17:49 schrieb Jonas Smedegaard :

> [re-adding bugreport and setting same as reply-to]

I did that intentionally but I’m also okay with having some smirky remarks 
publicly accessible.

> Licensing issue is different - quoting from ghostpdl/pcl/LICENSE:
> 
>> The set of truetype fonts in the urwfonts directory are necessary for 
>> the PCL/XL interpreter to function properly but they ARE NOT FREE 
>> SOFTWARE and are NOT distributed under the GNU GPL. They can instead 
>> be redistributed under the AFPL licence which bars commercial use.
> 
> Seems (but need closer inspection) that the fonts are free except for 
> commercial use and therefore permitted in Debian non-free.

So I may look forward for a gpcl package for unstable in a not all to far 
future?

>> I’m tinkering with OS/400 in my spare time. Printing from there 
>> without embedded graphics always creates just PCL data. I’m currently 
>> developing an lpd-infilter which enables me to just throw PS or PCL 
>> data into the print queue on Linux and I’ll get a nice PDF generated 
>> and placed in the calling user’s home. At the moment it’s just in an 
>> „it works“ state but when I added proper error handling routines, I’ll 
>> release this as GPL OSS.
> Sounds like a fun project :-)

Yes, indeed!

:wq! PoC



Bug#855704: taskwarrior: Please add Timewarrior

2017-02-21 Thread Patrik Schindler
Package: taskwarrior
Version: 2.3.0+dfsg-3
Severity: wishlist

Please add the accompanying timewarrior to the Debian-Repo.

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages taskwarrior depends on:
ii  libc6 2.19-18+deb8u7
ii  libgcc1   1:4.9.2-10
ii  libreadline6  6.3-8+b3
ii  libstdc++64.9.2-10
ii  libuuid1  2.25.2-6

taskwarrior recommends no packages.

taskwarrior suggests no packages.

-- no debconf information



Bug#855219: ghostscript: Please add gspcl

2017-02-15 Thread Patrik Schindler
Package: ghostscript
Version: 9.06~dfsg-2+deb8u4
Severity: wishlist

The GhostScript project also offers gspcl, which does the same with PCL-Data as
GhostScript does with PostScript. There's no package for Debian and
implementing this seems to be not so trivial, because gspcl generates the same
scripts as ghostscript itself (ps2pdf and the like).

Please add gspcl to Debian. :-) Thanks!

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages ghostscript depends on:
ii  debconf [debconf-2.0]  1.5.56
ii  gsfonts1:8.11+urwcyr1.0.7~pre44-4.2
ii  libc6  2.19-18+deb8u7
ii  libgs9 9.06~dfsg-2+deb8u4

ghostscript recommends no packages.

Versions of packages ghostscript suggests:
ii  ghostscript-x  9.06~dfsg-2+deb8u4

-- no debconf information



Bug#854629: lpd calls infilter with -j but this is not mentioned in printcap(5)

2017-02-08 Thread Patrik Schindler
Package: lpr
Version: 1:2008.05.17.1
Severity: normal

lpd calls infilter with -j but this flag is not mentioned in printcap(5),
FILTERS section, all others are.

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages lpr depends on:
ii  libc62.19-18+deb8u7
ii  netbase  5.3

lpr recommends no packages.

Versions of packages lpr suggests:
pn  gs   
pn  magicfilter | apsfilter  

-- Configuration Files:
/etc/default/lpd changed [not included]

-- no debconf information



Bug#838767: opendkim: Refuses to check mails with large headers

2016-09-24 Thread Patrik Schindler
Hello Scott,

Thanks for your fast response!

Am 24.09.2016 um 17:45 schrieb Scott Kitterman :

> Thanks.  I like to minimize long-term differences with upstream.  Before 
> applying this to the Debian package, I'd like to have an upstream suitable 
> patch, which I think would involve making this a configuration item rather 
> than just changing the hard coded value.

I wanted to provide a fast fix for the issue, so it’s just hard coded. I see 
that new upstream versions are pulled into stretch and sid, so why put time 
into something which will be obsolete in a few months?

> If you can update the patch, I'll add it.  Otherwise, I'll do it eventually, 
> but I'm not sure when I'll have time.

Same here: Time. Since I’m not a seasoned programmer, I’m sure I need a lot of 
additional time compared to you. :-) Please consider the hard coded stuff vor 
my reason above. Thank you!

:wq! PoC



Bug#838767: opendkim: Refuses to check mails with large headers

2016-09-24 Thread Patrik Schindler
Package: opendkim
Version: 2.9.2-2
Severity: normal
Tags: patch

For the exact problem see 
https://sourceforge.net/p/opendkim/support-requests/30/

-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages opendkim depends on:
ii  adduser3.113+nmu3
ii  libbsd00.7.0-2
ii  libc6  2.19-18+deb8u6
ii  libdb5.3   5.3.28-9
ii  libldap-2.4-2  2.4.40+dfsg-1+deb8u2
ii  liblua5.1-05.1.5-7.1
ii  libmemcached11 1.0.18-4
ii  libmemcachedutil2  1.0.18-4
ii  libmilter1.0.1 8.14.4-8+deb8u1
ii  libopendbx11.4.6-8
ii  libopendkim9   2.9.2-2
ii  librbl12.9.2-2
ii  libssl1.0.01.0.1t-1+deb8u5
ii  libunbound21.4.22-3+deb8u2
ii  libvbr22.9.2-2
ii  lsb-base   4.1+Debian13+nmu1

opendkim recommends no packages.

Versions of packages opendkim suggests:
ii  opendkim-tools  2.9.2-2

-- Configuration Files:
/etc/opendkim.conf changed [not included]

-- no debconf information

-- Patch

Description: Increase max header size
 See https://sourceforge.net/p/opendkim/support-requests/30/
 .
 opendkim (2.9.2-2.1) UNRELEASED; urgency=medium
 .
   * Non-maintainer upload.
   * Increased allowed header size
Author: Patrik Schindler 

---
The information above should follow the Patch Tagging Guidelines, please
checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
are templates for supplementary fields that you might want to add:

Origin: other
Bug: https://sourceforge.net/p/opendkim/support-requests/30/
Bug-Debian: https://bugs.debian.org/
Bug-Ubuntu: https://launchpad.net/bugs/
Forwarded: 
Reviewed-By: 
Last-Update: <2016-09-24>

--- opendkim-2.9.2.orig/opendkim/opendkim.h
+++ opendkim-2.9.2/opendkim/opendkim.h
@@ -49,7 +49,7 @@
 #defineDEFCONFFILE CONFIG_BASE "/opendkim.conf"
 #defineDEFFLOWDATATTL  86400
 #defineDEFINTERNAL "csl:127.0.0.1,::1"
-#defineDEFMAXHDRSZ 65536
+#defineDEFMAXHDRSZ 262144
 #defineDEFMAXVERIFY3
 #defineDEFTIMEOUT  5
 #defineHOSTUNKNOWN "unknown-host"



Bug#756479: nagios-nrpe-server: Ignores dont_blame_nrpe=1

2015-07-12 Thread Patrik Schindler
Hello,

following the discussion, I see no other option for me than recompile nrpe with 
command args enabled and set it to hold.

About the arguments flowing between the paticipants of this bug report: I don't 
know about prior discussions. Most Debian users don't know about these. And I 
think people like Jan Huijsmans and Michal Zelinka are unneccessarily rude. I 
understand Alexander Wirt. Maintaining software he was somehow pestered into 
only to get beaten off with decision he made and is supported by the debian 
security team is not a nice thing.

Now everyone is pissed and nrpe_server is orphan. Also not a good way.

But I must agree that (from the users's point) silently disabling a feature 
some people were relying on without any warning is not a good way. What *could* 
have been done in this case was utilizing a message pop up like some other 
packages do when substancial an incompatible changes in the software were about 
to happen with the installation. Could have saved me debugging time.

:wq! PoC


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#747896: dnssec-tools: Donuts fails to verify long TXT RR

2014-05-12 Thread Patrik Schindler
Package: dnssec-tools
Version: 1.13-1
Severity: normal

donuts fails to parse a broken-up TXT-Record, which is
needed to  break up long strings loke this for DKIM:

m201404._domainkey IN TXT ( "v=DKIM1; t=s; p="
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMI"
"IBCgKCAQEAsN/8vrWO7k1LqesB3mbI1tV8Bb"
"ckvOlUEwsgKv420lQgjarrbT3fb9VetIDe/a"
"Awgdq1JK3dlK/qa0jN85CYd37DSi1fOwBhI+"
"/UaYKYOYvgVqqVCTa6rrYEjZZsxknTBACtUZ"
"Gwopkn4ofHQpLaVxNK5XAW4+5JmvrpzkS7nS"
"czO+UuEFw/q5Tq+T2FDVQ7JfH/ndhWNTcrRI"
"B2WBaGYsGaytQGVQzcLIMBYWheTkxdFpiKZl"
"B7rHzuJnPk7XeYXeQryW80M06fQvn2J9oOIO"
"ZGP26tXYUxpHp5J4cYnOx+TcX6qze43IKCB9"
"rD1Rwgh8dSHclLNozEES1LBaZ1owIDAQAB;"
  )

-- System Information:
Debian Release: 7.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages dnssec-tools depends on:
ii  bind9utils   1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libmailtools-perl2.09-1
ii  libnet-dns-perl  0.66-2+b2
ii  libnet-dns-sec-perl  0.16-2
ii  libtimedate-perl 1.2000-1
ii  perl 5.14.2-21+deb7u1

Versions of packages dnssec-tools recommends:
ii  bind9  1:9.8.4.dfsg.P1-6+nmu2+deb7u1

dnssec-tools suggests no packages.

-- Configuration Files:
/etc/default/rollerd changed [not included]
/etc/dnssec-tools/dnssec-tools.conf changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#710431: Missing manpage groff_mmse

2013-05-30 Thread Patrik Schindler
Package: groff
Version: 1.22.2-2
Severity: minor

The manual page states:

SEE ALSO
   groff(1), troff(1), tbl(1), pic(1), eqn(1)
   groff_mmse(7)

There is no manpage named groff_mmse.

-- System Information:
Debian Release: 6.0.7
  APT prefers oldstable
  APT policy: (990, 'oldstable'), (500, 'oldstable-updates'), (50, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages groff depends on:
ii  dpkg  1.15.8.13  Debian package management system
ii  groff-base1.22.2-2   GNU troff text-formatting system (
ii  install-info  4.13a.dfsg.1-6 Manage installed documentation in 
ii  libc6 2.11.3-4   Embedded GNU C Library: Shared lib
ii  libgcc1   1:4.4.5-8  GCC support library
ii  libice6   2:1.0.6-2  X11 Inter-Client Exchange library
ii  libsm62:1.1.1-1  X11 Session Management library
ii  libstdc++64.4.5-8The GNU Standard C++ Library v3
ii  libx11-6  2:1.3.3-4  X11 client-side library
ii  libxaw7   2:1.0.7-1  X11 Athena Widget library
ii  libxmu6   2:1.0.5-2  X11 miscellaneous utility library
ii  libxt61:1.0.7-1  X11 toolkit intrinsics library

Versions of packages groff recommends:
ii  ghostscript8.71~dfsg2-9+squeeze1 The GPL Ghostscript PostScript/PDF
ii  imagemagick8:6.6.0.4-3+squeeze3  image manipulation programs
ii  libpaper1  1.1.24library for handling paper charact
ii  netpbm 2:10.0-12.2+b1Graphics conversion tools between 
ii  perl   5.10.1-17squeeze6 Larry Wall's Practical Extraction 
ii  psutils1.17-27   A collection of PostScript documen

groff suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#677992: sqwebmail: Parses Qmail date-headers wrongly

2012-06-18 Thread Patrik Schindler
Package: sqwebmail
Version: 0.65.0-3
Severity: normal


Hello,

qmail places dates in UTC in mail headers:

Date: Mon, 18 Jun 2012 12:41:23 +

sqwebmail doesn't recognize that and shows plain UTC, not MET (as supposed to).

-- System Information:
Debian Release: 6.0.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sqwebmail depends on:
ii  apache2-mpm-prefork [h 2.2.16-6+squeeze7 Apache HTTP Server - traditional n
pn  courier-authdaemon (no description available)
pn  courier-base   (no description available)
pn  courier-maildrop   (no description available)
ii  cron   3.0pl1-116process scheduling daemon
ii  expect 5.44.1.15-4   A program that can automate intera
ii  iamerican [ispell-dict 3.1.20.0-7An American English dictionary for
ii  ispell 3.1.20.0-7International Ispell (an interacti
ii  libc6  2.11.3-3  Embedded GNU C Library: Shared lib
pn  libgdbmg1  (no description available)
ii  qmail-run [mail-transp 1.0.1-leitrix11   sets up qmail as mail-transfer-age

sqwebmail recommends no packages.

Versions of packages sqwebmail suggests:
pn  courier-pcp(no description available)
ii  gnupg 1.4.10-4   GNU privacy guard - a free PGP rep



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#677171: tn5250: Provide Translation Maps for Unicode

2012-06-11 Thread Patrik Schindler
Package: tn5250
Version: 0.17.4-2
Severity: wishlist

Hello,

the manpage for tn5250 states, that there are only maps for Latin1 (mostly).
Today, default locale on Linux is UTF8.

Would be nice to have translation maps for UTF8, also.

Thanks!

:wq! PoC

-- System Information:
Debian Release: 6.0.5
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages tn5250 depends on:
ii  libc6  2.11.3-3  Embedded GNU C Library: Shared lib
ii  libncurses55.7+20100313-5shared libraries for terminal hand
ii  libssl0.9.80.9.8o-4squeeze13 SSL shared libraries
ii  ncurses-base   5.7+20100313-5basic terminal type definitions

Versions of packages tn5250 recommends:
ii  dialog1.1-20100428-1 Displays user-friendly dialog boxe
ii  whiptail  0.52.11-1  Displays user-friendly dialog boxe
ii  xterm [x-terminal-emulato 261-1  X terminal emulator

tn5250 suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#533627: Ietadm

2012-03-18 Thread Patrik Schindler

Hello,

perhaps, ietadm can be of some help until configfile-rereading is  
implemented?


:wq! PoC





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#660472: jabberd14: Unclear state of source package

2012-02-19 Thread Patrik Schindler
Package: jabberd14
Version: 1.6.1.1-5+squeeze1
Severity: normal

The jabberd14 upstream page states that jabberd2 is a complete separate project.
(see http://www.jabberd.org/)
But there is a libjabberd2-dev Package in sid, which should be build out of
jabberd14-source (I did not actually check this). libjabberd2 also is a
dependency of jabberd14.

On the other hand, jabberd14-dev can not be downloaded as well as there is no
jabber-dev transitional package, which many extension packages require as a
dependency.

This situation breaks compilation and packaging of jabber-muc and jabber-jud.
Additionally, jabber-muc in squeeze is actually for jabberd2 (see bug #631195).
Jabber-jud in Squeeze is not existant anymore.

Please clarify. Thank you!

-- System Information:
Debian Release: 6.0.4
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.32.poc.8 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages jabberd14 depends on:
ii  adduser   3.112+nmu2 add and remove users and groups
ii  libc6 2.11.3-2   Embedded GNU C Library: Shared lib
ii  libgcc1   1:4.4.5-8  GCC support library
ii  libidn11  1.15-2 GNU Libidn library, implementation
ii  libjabberd2   1.6.1.1-5+squeeze1 Runtime library for the Jabber/XMP
ii  libmysqlclient16  5.1.49-3   MySQL database client library
ii  libpopt0  1.16-1 lib for parsing cmdline parameters
ii  libpq58.4.10-0squeeze1   PostgreSQL C client library
ii  libpth20  2.0.7-16   The GNU Portable Threads
ii  libstdc++64.4.5-8The GNU Standard C++ Library v3
ii  lsb-base  3.2-23.2squeeze1   Linux Standard Base 3.2 init scrip
ii  openssl   0.9.8o-4squeeze7   Secure Socket Layer (SSL) binary a

jabberd14 recommends no packages.

jabberd14 suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#600798: Unreachable devices corrupt logfiles

2011-11-28 Thread Patrik Schindler
Hello,

with Squeeze, I still can see this behaviour.

:wq! PoC





-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#591860: radvd won't start if interface in config file is not RUNNING

2011-10-07 Thread Patrik Schindler

Hello,

I can observe a likewise behaviour, for example when I powercycle the  
switch connected to eth0:


Oct  7 03:00:04 leela radvd[11925]: attempting to reread config file
Oct  7 03:00:04 leela radvd[11925]: interface eth0 is not RUNNING
Oct  7 03:00:04 leela radvd[11925]: interface eth0 does not exist
Oct  7 03:00:04 leela radvd[11925]: error parsing or activating the  
config file: /etc/radvd.conf
Oct  7 03:00:04 leela radvd[11924]: Exiting, privsep_read_loop had  
readn return 0 bytes


I strongly suggest that radvd shall not edit silently but stay and  
wait for the interface to come up again, regardless of  
IgnoreIfMissing, because the interface isn't really missing but only  
(temporarily) not in running state. One who doesn't know this  
behaviour will sit and analyze for a time why radvd has vanished.


Thank you for your consideration.

In the meantime, I use the recommended fix by enabling IgnoreIfMissing.

:wq! PoC





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#642197: smokeping: Typo in Mailtemplate

2011-09-20 Thread Patrik Schindler
Package: smokeping
Version: 2.3.6-5
Severity: minor

Hello,

attached patch fixes a typo in /etc/smokeping.

--- smokemail.orig  2011-09-20 10:09:14.0 +0200
+++ smokemail   2011-09-20 10:09:27.0 +0200
@@ -9,7 +9,7 @@
 your IP changes. You can run the script as often as you want.
 
 The script is written in Perl. If you don't have Perl available on your
-system, you must have a Windows Box. You can easily fix this prolem by
+system, you must have a Windows Box. You can easily fix this problem by
 downloading ActivePerl from www.activestate.com
 
 As soon as you have run the SmokePing Agent, the SmokePing server will

-- System Information:
Debian Release: 6.0.2
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 
'proposed-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.32.poc.5 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.iso885915 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash

Versions of packages smokeping depends on:
ii  adduser   3.112+nmu2 add and remove users and groups
ii  debianutils   3.4Miscellaneous utilities specific t
ii  fping 2.4b2-to-ipv6-16.1 sends ICMP ECHO_REQUEST packets to
ii  libconfig-grammar-per 1.10-1 grammar-based user-friendly config
ii  libdigest-hmac-perl   1.02+dfsg-1module for creating standard messa
ii  libjs-cropper 1.2.1-2JavaScript image cropper UI
ii  libjs-prototype   1.6.1-1JavaScript Framework for dynamic w
ii  libjs-scriptaculous   1.8.3-1JavaScript library for dynamic web
ii  librrds-perl  1.4.3-1time-series data storage and displ
ii  libsnmp-session-perl  1.13-1 Perl support for accessing SNMP-aw
ii  liburi-perl   1.54-2 module to manipulate and access UR
ii  libwww-perl   5.836-1Perl HTTP/WWW client/server librar
ii  lsb-base  3.2-23.2squeeze1   Linux Standard Base 3.2 init scrip
ii  perl  5.10.1-17squeeze2  Larry Wall's Practical Extraction 
ii  speedy-cgi-perl   2.22-13speed up perl scripts by making th
ii  ucf   3.0025+nmu1Update Configuration File: preserv

Versions of packages smokeping recommends:
ii  apache2  2.2.16-6+squeeze3   Apache HTTP Server metapackage
ii  apache2-mpm-pref 2.2.16-6+squeeze3   Apache HTTP Server - traditional n
ii  dnsutils 1:9.7.3.dfsg-1~squeeze3 Clients provided with BIND
ii  echoping 6.0.2-3+b1  A small test tool for TCP servers
ii  libsocket6-perl  0.23-1  Perl extensions for IPv6

Versions of packages smokeping suggests:
ii  curl7.21.0-2 Get a file from an HTTP, HTTPS or 
pn  libauthen-radius-perl  (no description available)
pn  libio-socket-ssl-perl  (no description available)
ii  libnet-dns-perl 0.66-2   Perform DNS queries from a Perl sc
pn  libnet-ldap-perl   (no description available)
ii  libnet-telnet-perl  3.03-3   Script telnetable connections
ii  openssh-client  1:5.5p1-6secure shell (SSH) client, for sec
ii  sendmail [mail-transport-ag 8.14.5-poc.2 powerful, efficient, and scalable 

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#631195: Jabber-muc is for jabberd2, missing jabber-muc for jabberd1.4

2011-06-21 Thread Patrik Schindler
Package: jabber-muc
Version: 0.8-3
Severity: normal

Installing jabberd-muc on squeeze reveals configuration and directories for
jabberd2. Unfortunately, jabberd2 is not available for squeeze.

I'd recommend renaming components for jabberd2 accordingly and provide
the proper jabber-muc 0.6.0-2.1 from lenny.

-- System Information:
Debian Release: 6.0.1
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 
'proposed-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.32poc.2 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.iso885915 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash

Versions of packages jabber-muc depends on:
ii  adduser   3.112+nmu2 add and remove users and groups
ii  libc6 2.11.2-10  Embedded GNU C Library: Shared lib
ii  libexpat1 2.0.1-7XML parsing C library - runtime li
ii  libglib2.0-0  2.24.2-1   The GLib library of C routines
ii  libidn11  1.15-2 GNU Libidn library, implementation

Versions of packages jabber-muc recommends:
ii  jabberd14 1.6.1.1-5+squeeze1 Instant messaging server using the

jabber-muc suggests no packages.

-- Configuration Files:
/etc/jabberd2/component.d/60muc [Errno 13] Permission denied: 
u'/etc/jabberd2/component.d/60muc'
/etc/jabberd2/muc.xml [Errno 13] Permission denied: u'/etc/jabberd2/muc.xml'

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#629831: dump: Restore exits after prompting for next tape

2011-06-08 Thread Patrik Schindler
Package: dump
Version: 0.4b43-1
Severity: normal
Tags: upstream patch

When restoring from mutiple tapes, restore asks for changing the tape
and which device to use (and supplies a default value). After trying to
continue, restore exits with 1.

Stelian Pop verified this one as a bug and supplied the following patch.

Index: restore/tape.c
===
RCS file: /cvsroot/dump/dump/restore/tape.c,v
retrieving revision 1.101
diff -u -p -r1.101 tape.c
--- restore/tape.c  5 May 2011 16:05:40 -   1.101
+++ restore/tape.c  8 Jun 2011 15:38:59 -
@@ -586,7 +586,7 @@ again:
fprintf(stderr, "otherwise enter tape name (default: %s) ", 
magtape);
#endif
(void) fflush(stderr);
-   if (fgets(buf, TP_BSIZE, terminal))
+   if (!fgets(buf, TP_BSIZE, terminal))
exit(1);
if (feof(terminal))
exit(1);

I can't test the patch, since I don't know how to deal with this error:

dpkg-source: info: use the '3.0 (quilt)' format to have separate and documented 
changes to upstream files, see dpkg-source(1)
dpkg-source: unrepresentable changes to source
dpkg-buildpackage: error: dpkg-source -b dump-0.4b43 gave error exit status 1


-- System Information:
Debian Release: 6.0.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 
'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32poc.2 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.iso885915 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash

Versions of packages dump depends on:
ii  e2fslibs  1.41.12-2  ext2/ext3/ext4 file system librari
ii  libblkid1 2.17.2-9   block device id library
ii  libc6 2.11.2-10  Embedded GNU C Library: Shared lib
ii  libcomerr21.41.12-2  common error description library
ii  libncurses5   5.7+20100313-5 shared libraries for terminal hand
ii  libreadline6  6.1-3  GNU readline and history libraries
ii  libselinux1   2.0.96-1   SELinux runtime shared libraries
ii  libuuid1  2.17.2-9   Universally Unique ID library
ii  tar   1.23-3 GNU version of the tar archiving u

dump recommends no packages.

dump suggests no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#619936: dlint: Dependencies not met for dig

2011-03-28 Thread Patrik Schindler

Hello,

Am 28.03.2011 um 16:25 schrieb Florian Hinzmann:


Do you have (another) dig binary within your search path
or within
"/usr/ucb:/usr/bsd:/bin:/usr/bin:/usr/local/bin:/usr/share/bin:/usr/ 
com/bin",

what is what dlint searches.


Nope, nothing


~ $ which dig
/usr/bin/dig



What does "type dig" resp. "which dig" and "dig -v" say?



~ $ type dig
dig is hashed (/usr/bin/dig)
~ $ dig -v
DiG 9.7.2-P3



Please allow another question before I return to this issue
later: Which shell do you use when this problem occurs?



Bash.


Since dlint is a shell script, I will add debugging output here:

~ $ bash -x dlint pocnet.net
+ test x/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:/home/poc/ 
bin:/usr/sbin:/sbin:/usr/local/sbin = x
+ PATH=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:/home/poc/ 
bin:/usr/sbin:/sbin:/usr/local/sbin:/usr/ucb:/usr/bsd:/bin:/usr/bin:/ 
usr/local/bin:/usr/share/bin:/usr/com/bin

+ export PATH
+ VERSION=1.4.0
+ rrfilt=/usr/share/dlint/digparse
++ tempfile --prefix=dlintns
+ TMPNS=/tmp/dlintkufa3x
++ tempfile --prefix=dlintzone
+ TMPZONE=/tmp/dlintKRgazA
++ tempfile --prefix=dlintptr
+ TMPPTR=/tmp/dlintsdRDWA
++ tempfile --prefix=dlinta
+ TMPA=/tmp/dlintWfpAfB
++ tempfile --prefix=dlintsubdoms
+ TMPSUBDOMS=/tmp/dlint9q8AyB
++ tempfile --prefix=dlinterr
+ TMPERR=/tmp/dlintRRvEmz
++ tempfile --prefix=dlinterr2
+ TMPERR2=/tmp/dlintgSWnEz
++ tempfile --prefix=dlintserials
+ TMPSERIALS=/tmp/dlintF7akXz
+ trap 'rm -f /tmp/dlintkufa3x /tmp/dlintKRgazA /tmp/dlintsdRDWA /tmp/ 
dlintWfpAfB /tmp/dlint9q8AyB /tmp/dlintRRvEmz /tmp/dlintgSWnEz; exit  
4' 1 2 3 15

+ test 1 -lt 1 -o 1 -gt 2
++ echo -n hello
++ wc -l
+ test 0 -eq 0
+ echoc=
+ echon=-n
++ dig localhost any
++ head -1
++ grep DiG
++ sed -e 's/.*DiG \([0-9.]*\).*/\1/'
+ ver=
++ echo
++ awk '$1 >= 2.1 {print "ok"; exit}'
+ ans=
+ test x '!=' xok
+ echo ';; This program requires DiG version 2.1 or newer, which I  
cannot find.'

;; This program requires DiG version 2.1 or newer, which I cannot find.
+ exit 3


After a bit of searching, I tried dlint with another user and that  
works out ok.


Reason is that my user has a .digrc which makes dig more terse by  
suppressing information I usually don't want to see.


Contents:
+ret=2 +noauthority +noadditional +noquestion +nostats +nocmd

Now I'm no longer sure if dig stopped working with the squeeze-upgrade  
or way earlier when adding a .digrc.


How to cope with that properly?

Thanks for taking time and sorry for not debugging in the first place  
myself.



:wq! PoC




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#619936: dlint: Dependencies not met for dig

2011-03-28 Thread Patrik Schindler
Package: dlint
Version: 1.4.0-7
Severity: grave
Justification: renders package unusable

After upgrading from Lenny to Squeeze, dig will not start anymore. It says:

;; This program requires DiG version 2.1 or newer, which I cannot find.

-- System Information:
Debian Release: 6.0.1
  APT prefers squeeze-updates
  APT policy: (500, 'squeeze-updates'), (500, 'proposed-updates'), (500, 
'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.iso885915 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash

Versions of packages dlint depends on:
ii  dnsutils 1:9.7.2.dfsg.P3-1.1 Clients provided with BIND
ii  perl 5.10.1-17   Larry Wall's Practical Extraction 

dlint recommends no packages.

dlint suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#582450: tests

2011-03-21 Thread Patrik Schindler

Hello,

Am 19.03.2011 um 16:37 schrieb Ritesh Raj Sarraf:

Now that squeeze is released, do you have the bandwidth to test this  
bug?



Tested, works now without hassle. Bug can be closed.

Thanks!


:wq! PoC





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#616413: calendarserver: Occassional internal server error

2011-03-10 Thread Patrik Schindler


Am 07.03.2011 um 09:51 schrieb Rahul Amaram:

One possible reason for this could be if you have enabled Digest  
Authentication on the server but trying to use Basic Authentication  
on the client. In /etc/caldavd/caldavd.plist, disable Digest  
Authentication and enable Basic authentication. Then try connecting.  
Let me know if the problem is resolved.



After changing the configuration to only enable exactly *one*  
authentication scheme, the problem seems to be gone. I use digest auth  
exclusively now.


Thank you for your help!


:wq! PoC





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#616413: calendarserver: Occassional internal server error

2011-03-04 Thread Patrik Schindler
Package: calendarserver
Version: 2.4.dfsg-6
Severity: important

Accessing the calendarserver with iCal from OS 10.5 and 10.6 yields sometimes 
internal server errors, mostly with ToDo-List items (creation, deletion) and 
appointments (creation, deletion). Seldom with modifications.

Error given by iCal:
"HTTP/1.1 500 Internal Server Error"
on operation CalDAVRevertEntityQueueableOperation.

I can't see how this error can be triggered definitely. It started occuring 
after the upgrade from Lenny to Squeeze.

Server error log entries related to above error:

2011-03-04 10:06:16+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] 
Exception rendering:
2011-03-04 10:06:16+0100 [-] [caldav-8008]  [PooledMemCacheProtocol,client] 
Unhandled Error
2011-03-04 10:06:16+0100 [-] [caldav-8008]  Traceback (most recent call 
last):
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 267, in errback
2011-03-04 10:06:16+0100 [-] [caldav-8008]  
self._startRunCallbacks(fail)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 310, in _startRunCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  self._runCallbacks()
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 326, in _runCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  self.result = 
callback(self.result, *args, **kw)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 769, in gotResult
2011-03-04 10:06:16+0100 [-] [caldav-8008]  _inlineCallbacks(r, g, 
deferred)
2011-03-04 10:06:16+0100 [-] [caldav-8008]  ---  ---
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 747, in _inlineCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  result = 
result.throwExceptionIntoGenerator(g)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/python/failure.py",
 line 338, in throwExceptionIntoGenerator
2011-03-04 10:06:16+0100 [-] [caldav-8008]  return g.throw(self.type, 
self.value, self.tb)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twistedcaldav/method/get.py",
 line 65, in http_GET
2011-03-04 10:06:16+0100 [-] [caldav-8008]  response = (yield 
super(CalDAVFile, self).http_GET(request))
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 747, in _inlineCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  result = 
result.throwExceptionIntoGenerator(g)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/python/failure.py",
 line 338, in throwExceptionIntoGenerator
2011-03-04 10:06:16+0100 [-] [caldav-8008]  return g.throw(self.type, 
self.value, self.tb)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twistedcaldav/extensions.py",
 line 145, in authenticate
2011-03-04 10:06:16+0100 [-] [caldav-8008]  creds = (yield 
factory.decode(authHeader[1], request))
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 747, in _inlineCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  result = 
result.throwExceptionIntoGenerator(g)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/python/failure.py",
 line 338, in throwExceptionIntoGenerator
2011-03-04 10:06:16+0100 [-] [caldav-8008]  return g.throw(self.type, 
self.value, self.tb)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twistedcaldav/directory/digest.py",
 line 229, in decode
2011-03-04 10:06:16+0100 [-] [caldav-8008]  result = (yield 
self._validate(auth, request))
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twisted/internet/defer.py",
 line 749, in _inlineCallbacks
2011-03-04 10:06:16+0100 [-] [caldav-8008]  result = g.send(result)
2011-03-04 10:06:16+0100 [-] [caldav-8008]File 
"/usr/lib/twisted-calendarserver/lib/python2.6/site-packages/twistedcaldav/directory/digest.py",
 line 271, in _validate
2011-03-04 10:06:16+0100 [-] [caldav-8008]  raise 
error.LoginFailed('Invalid nonce value: %s' % (nonce,))

Bug#611297: segfault in timer handling code

2011-03-01 Thread Patrik Schindler

Hello,

I can also observe this behaviour, but I haven't tracked this down to  
great detail. It happens after upgrading from Lenny to Squeeze.


Mar  1 11:56:16 mybox kernel: [1077949.808467] radvd[2631]: segfault  
at 10 ip 0804b8d3 sp bff99ad0 error 6 in radvd[8048000+13000]
Mar  1 12:13:40 mybox kernel: [1078994.097019] radvd[13822]: segfault  
at 10 ip 0804b8d3 sp bfe1fbd0 error 6 in radvd[8048000+13000]
Mar  1 12:40:21 mybox kernel: [1080594.789963] radvd[16559]: segfault  
at 10 ip 0804b8d3 sp bf87a990 error 6 in radvd[8048000+13000]


That happens only when other IPv6 boxes on the same subnet were booted.

I'm using radvd to have IPv6 on Token Ring but I don't think that this  
is related. It worked on Lenny.


:wq! PoC





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



  1   2   >