[Bug 678421] Re: Error message for a faulty ~/.profile script

2014-10-15 Thread Alec Warner
I think we would also prefer a dialog, but I will take errors in
~/.xsession-errors over nothing. We can instruct our support staff to
look there for these errors; right now there are no errors anywhere and
so it is difficult to debug the root cause of the problem.

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/678421

Title:
  Error message for a faulty ~/.profile script

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/678421/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 1319941] Re: libreoffice draw / impress crash if user service publishing is disabled in avahi

2014-05-19 Thread Alec Warner
On Sat, May 17, 2014 at 10:48 AM, Christopher M. Penalver 
christopher.m.penal...@gmail.com wrote:

 Alec Warner, would running Ubuntu in a live environment allow one to
 adhere to security policy, and submit the crash?


Yeah i'll do that next week.

-A



 --
 You received this bug notification because you are subscribed to the bug
 report.
 https://bugs.launchpad.net/bugs/1319941

 Title:
   libreoffice draw / impress crash if user service publishing is
   disabled in avahi

 Status in “libreoffice” package in Ubuntu:
   Invalid

 Bug description:
   Both loimpress and lodraw fail to start with an error message related
   to avahi:

   $ loimpress
   avahi_entry_group_new() failed: Not permitted
   soffice.bin: client.c:626: avahi_client_free: Assertion `client' failed.

   $ ps ax | grep avahi
7617 pts/0S+ 0:00 grep --color=auto avahi
   21356 ?S  0:07 avahi-daemon: running [hostname.local]
   21380 ?S  0:00 avahi-daemon: chroot helper

   This is the backtrace of the crash:

   $ cat gdbtrace.log
   warning: Currently logging to gdbtrace.log.  Turn the logging off and on
 to make the new setting effective.
   warning: Unable to find libthread_db matching inferior's thread library,
 thread debugging will not be available.

   Program received signal SIGABRT, Aborted.
   0x741f2f79 in __GI_raise (sig=sig@entry=6) at
 ../nptl/sysdeps/unix/sysv/linux/raise.c:56
   56../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
   #0  0x741f2f79 in __GI_raise (sig=sig@entry=6) at
 ../nptl/sysdeps/unix/sysv/linux/raise.c:56
   #1  0x741f6388 in __GI_abort () at abort.c:89
   #2  0x741ebe36 in __assert_fail_base (fmt=0x7433d718
 %s%s%s:%u: %s%sAssertion `%s' failed.\n%n, 
 assertion=assertion@entry=0x7fffe95b6919
 client, file=file@entry=0x7fffe95b6910 client.c, line=line@entry=626,
 function=function@entry=0x7fffe95b6fe0 avahi_client_free) at assert.c:92
   #3  0x741ebee2 in __GI___assert_fail (assertion=0x7fffe95b6919
 client, file=0x7fffe95b6910 client.c, line=626, function=0x7fffe95b6fe0
 avahi_client_free) at assert.c:101
   #4  0x7fffe95af06b in avahi_client_free () from
 /usr/lib/x86_64-linux-gnu/libavahi-client.so.3
   #5  0x7fffbac7c40c in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #6  0x7fffbac7c678 in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #7  0x7fffe95aec2c in ?? () from
 /usr/lib/x86_64-linux-gnu/libavahi-client.so.3
   #8  0x7fffe95af3aa in avahi_client_new () from
 /usr/lib/x86_64-linux-gnu/libavahi-client.so.3
   #9  0x7fffbac7c8a5 in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #10 0x7fffbac7d195 in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #11 0x7fffbac7d30b in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #12 0x7fffbac74756 in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #13 0x7fffbaa12b9b in ?? () from
 /usr/lib/libreoffice/program/../program/libsdlo.so
   #14 0x7fffbab83bc0 in sd_component_getFactory () from
 /usr/lib/libreoffice/program/../program/libsdlo.so

   This is on trusty.

   libreoffice-impress 1:4.2.3~rc3-0ubuntu

 To manage notifications about this bug go to:

 https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1319941/+subscriptions


-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319941

Title:
  libreoffice draw / impress crash if user service publishing is
  disabled in avahi

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1319941/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1319941] Re: libreoffice draw / impress crash if user service publishing is disabled in avahi

2014-05-16 Thread Alec Warner
Security policy prevents me from submitting crash reports which is why I
stuck with the gdb backtrace.

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319941

Title:
  libreoffice draw / impress crash if user service publishing is
  disabled in avahi

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1319941/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1319941] [NEW] libreoffice draw / impress crash on startup

2014-05-15 Thread Alec Warner
Public bug reported:

antarus@antarus-z620:/tmp$ cat gdbtrace.log 
warning: Currently logging to gdbtrace.log.  Turn the logging off and on to 
make the new setting effective.
warning: Unable to find libthread_db matching inferior's thread library, thread 
debugging will not be available.

Program received signal SIGABRT, Aborted.
0x741f2f79 in __GI_raise (sig=sig@entry=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
56  ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0  0x741f2f79 in __GI_raise (sig=sig@entry=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x741f6388 in __GI_abort () at abort.c:89
#2  0x741ebe36 in __assert_fail_base (fmt=0x7433d718 %s%s%s:%u: 
%s%sAssertion `%s' failed.\n%n, assertion=assertion@entry=0x7fffe95b6919 
client, file=file@entry=0x7fffe95b6910 client.c, line=line@entry=626, 
function=function@entry=0x7fffe95b6fe0 avahi_client_free) at assert.c:92
#3  0x741ebee2 in __GI___assert_fail (assertion=0x7fffe95b6919 
client, file=0x7fffe95b6910 client.c, line=626, function=0x7fffe95b6fe0 
avahi_client_free) at assert.c:101
#4  0x7fffe95af06b in avahi_client_free () from 
/usr/lib/x86_64-linux-gnu/libavahi-client.so.3
#5  0x7fffbac7c40c in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#6  0x7fffbac7c678 in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#7  0x7fffe95aec2c in ?? () from 
/usr/lib/x86_64-linux-gnu/libavahi-client.so.3
#8  0x7fffe95af3aa in avahi_client_new () from 
/usr/lib/x86_64-linux-gnu/libavahi-client.so.3
#9  0x7fffbac7c8a5 in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#10 0x7fffbac7d195 in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#11 0x7fffbac7d30b in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#12 0x7fffbac74756 in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#13 0x7fffbaa12b9b in ?? () from 
/usr/lib/libreoffice/program/../program/libsdlo.so
#14 0x7fffbab83bc0 in sd_component_getFactory () from 
/usr/lib/libreoffice/program/../program/libsdlo.so

This is on trusty.

libreoffice-impress 1:4.2.3~rc3-0ubuntu

** Affects: libreoffice (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319941

Title:
  libreoffice draw / impress crash on startup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1319941/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1319970] [NEW] speed-dispatcher user needs a restricted shell (/usr/sbin/nologin or /bin/false) instead of /bin/sh.

2014-05-15 Thread Alec Warner
Public bug reported:

antarus@killbot:~$ getent passwd speech-dispatcher
speech-dispatcher:x:113:29:Speech 
Dispatcher,,,:/var/run/speech-dispatcher:/bin/sh

DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION=Ubuntu Trusty Tahr (development branch)
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04

antarus@killbot:~$ apt-cache policy speech-dispatcher
speech-dispatcher:
  Installed: 0.8-5ubuntu1
  Candidate: 0.8-5ubuntu1

** Affects: speech-dispatcher
 Importance: Undecided
 Status: New

** Affects: speech-dispatcher (Ubuntu)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Affects: speech-dispatcher (Ubuntu Trusty)
 Importance: Undecided
 Status: Confirmed

** Affects: speech-dispatcher (Ubuntu Utopic)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Affects: speech-dispatcher (Debian)
 Importance: Unknown
 Status: Unknown

** Bug watch added: Debian Bug tracker #678951
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678951

** Also affects: speech-dispatcher via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678951
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319970

Title:
  speed-dispatcher user needs a restricted shell (/usr/sbin/nologin or
  /bin/false) instead of /bin/sh.

To manage notifications about this bug go to:
https://bugs.launchpad.net/speech-dispatcher/+bug/1319970/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1319973] [NEW] libuuid needs a default shell (seems to not specify any?)

2014-05-15 Thread Alec Warner
*** This bug is a security vulnerability ***

Public security bug reported:

antarus@killbot:~$ getent passwd libuuid
libuuid:x:100:101::/var/lib/libuuid:

A missing shell specification means it takes the default shell (usually
/bin/sh).


DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION=Ubuntu Trusty Tahr (development branch)
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04

antarus@killbot:/tmp$ apt-cache policy libuuid1
libuuid1:
  Installed: 2.20.1-5.1ubuntu20
  Candidate: 2.20.1-5.1ubuntu20

It should have /usr/sbin/nologin as its shell.

-A

** Affects: util-linux (Ubuntu)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Affects: util-linux (Ubuntu Trusty)
 Importance: Undecided
 Status: Confirmed

** Affects: util-linux (Ubuntu Utopic)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Affects: util-linux (Debian)
 Importance: Unknown
 Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319973

Title:
  libuuid needs a default shell (seems to not specify any?)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1319973/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1319195] [NEW] indicator-datetime set for 24 hours does not show 24 hour clock for Other Locations

2014-05-13 Thread Alec Warner
Public bug reported:

I configured the clock format to be 24-hour. This takes affect in the
system clock, however other locations are unaffected and still show
12-hour clock. See screenshot.

This is Ubuntu Trusty

indicator-datetime: 13.10.0+14.04.20140415.3-0ubuntu1

I expect the Other Locations to also be 24 hour display.

** Affects: indicator-datetime (Ubuntu)
 Importance: Undecided
 Status: New

** Attachment added: Screenshot of the problem.
   
https://bugs.launchpad.net/bugs/1319195/+attachment/4111766/+files/Screenshot.png

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1319195

Title:
  indicator-datetime set for 24 hours does not show 24 hour clock for
  Other Locations

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/indicator-datetime/+bug/1319195/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244627] Re: Please enable CONFIG_IMA in the ubuntu kernel

2014-01-03 Thread Alec Warner
** Tags removed: raring
** Tags added: saucy

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244627

Title:
  Please enable CONFIG_IMA in the ubuntu kernel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1244627/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1248359] [NEW] gnome-system-monitor cycles through processes in dependency view when viewing a processes properties

2013-11-05 Thread Alec Warner
Public bug reported:

Repro:
 Launch System Monitor.
 Enable menu View  Dependencies.
 Repro is faster if the processes are sorted by CPU usage.
 Right click some process (deeper in the tree for quicker repro),
 Select Properties.
Result:
 The dialog randomly shows information for various processes, switching between 
them when processes are rearranged.
 The name and process ID in the first line of the dialog does not match the 
name and process ID displayed inside the dialog.
 Usually System Monitor also crashes quite quickly,

antarus@antarus-z620:~/.gnome2/keyrings$ lsb_release -a
LSB Version:
core-2.0-amd64:core-2.0-noarch:core-3.0-amd64:core-3.0-noarch:core-3.1-amd64:core-3.1-noarch:core-3.2-amd64:core-3.2-noarch:core-4.0-amd64:core-4.0-noarch:cxx-3.0-amd64:cxx-3.0-noarch:cxx-3.1-amd64:cxx-3.1-noarch:cxx-3.2-amd64:cxx-3.2-noarch:cxx-4.0-amd64:cxx-4.0-noarch:desktop-3.1-amd64:desktop-3.1-noarch:desktop-3.2-amd64:desktop-3.2-noarch:desktop-4.0-amd64:desktop-4.0-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.0-amd64:graphics-3.0-noarch:graphics-3.1-amd64:graphics-3.1-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-3.2-amd64:printing-3.2-noarch:printing-4.0-amd64:printing-4.0-noarch:qt4-3.1-amd64:qt4-3.1-noarch
Distributor ID: Ubuntu
Description:Ubuntu 12.04.2 LTS
Release:12.04
Codename:   precise

antarus@antarus-z620:~/.gnome2/keyrings$ apt-cache policy gnome-system-monitor
gnome-system-monitor:
  Installed: 3.4.1-0ubuntu1
  Candidate: 3.4.1-0ubuntu1

** Affects: gnome-system-monitor (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1248359

Title:
  gnome-system-monitor cycles through processes in dependency view when
  viewing a processes properties

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-system-monitor/+bug/1248359/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1244627] [NEW] Please enable CONFIG_IMA in the ubuntu kernel

2013-10-25 Thread Alec Warner
Public bug reported:

I would be doubly happy if this also went into the raring backport
kernel.

I chatted with apw and kees on #ubuntu-kernel earlier in the week. From
a security engineer on our team:

so I was mistaken. if CONFIG_IMA=y, the default policy is NULL unless
you boot with ima_tcb=on. without ima_tcb=y, nothing is measured,
nothing is audited, no performance/memory hit is incurred.

Same is true for CONFIG_IMA_APPRAISE, except with the
ima_appraise_tcb=on commandline parameter. ima appraise gives us the
ability to sign binaries at installation time and check the signature at
runtime.

So we are asking that you enable CONFIG_IMA, but to not enable it via
the kernel command line options. IMA would boot with an empty policy and
should incur no overhead. Enterprising folks who want to run IMA can
enable it in grub at their option.

CONFIG_IMA=y

and possibly:

CONFIG_IMA_MEASURE_PCR_IDX=10
CONFIG_IMA_AUDIT=y
CONFIG_IMA_LSM_RULES=y

-A

** Affects: linux-meta-lts-saucy (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1244627

Title:
  Please enable CONFIG_IMA in the ubuntu kernel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-meta-lts-saucy/+bug/1244627/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1233441] Re: rsyslogd crashes when the spool is corrupted

2013-09-30 Thread Alec Warner
This is the corrupted spool. I recommend using a VM, or otherwise
backing up /var/spool/rsyslog.

-A

** Attachment added: This should be extracted into /, it contains corrupted 
spool contents
   
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1233441/+attachment/3852052/+files/var-spool-rsyslog.tar.gz

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1233441

Title:
  rsyslogd crashes when the spool is corrupted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1233441/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1233441] [NEW] rsyslogd crashes when the spool is corrupted

2013-09-30 Thread Alec Warner
Public bug reported:

When daemonizing, the child process segfault and the parent acts oddly.

To reproduce:

stop rsyslog
mv /var/spool/rsyslog /var/spool/rsyslog.bak
tar -xf var-spool-rsyslog.tar.gz -C /

gdb /usr/sbin/rsyslog
set follow-fork-mode child
run -c5

(gdb) bt
#0  strmFlushInternal (pThis=0x0) at stream.c:1236
#1  0x004291b9 in strmSerialize (pThis=0x0, pStrm=0x676150) at 
stream.c:1569
#2  0x0042ee02 in qqueuePersist (pThis=0x675a10, bIsCheckpoint=0) at 
queue.c:2015
#3  0x0042f026 in qqueueDestruct (ppThis=0x674d78) at queue.c:2153
#4  0x00432660 in StartDA (pThis=0x674b50) at queue.c:353
#5  InitDA (pThis=0x674b50, bLockMutex=optimized out) at queue.c:402
#6  qqueueStart (pThis=0x674b50) at queue.c:1914
#7  0x00437987 in actionConstructFinalize (pThis=0x674a60) at 
../action.c:405
#8  0x0043977e in addAction (ppAction=0x7fff8ca8, pMod=optimized 
out, pModData=0x673910, pOMSR=0x6732f0, bSuspended=0)
at ../action.c:1779
#9  0x00416934 in cflineDoAction (ppAction=synthetic pointer, 
p=0x7fff8c90) at conf.c:1105
#10 cflineClassic (ppRule=0x7fff8d10, p=0x7fff8d5c ) at conf.c:1172
#11 cfline (line=optimized out, pfCurr=0x7fff8d10) at conf.c:1207
#12 0x004171a5 in processConfFile (pConfFile=0x671af0 
/etc/rsyslog.d/40-loghost-client.conf) at conf.c:464
#13 0x00417586 in doIncludeLine (pp=optimized out, pVal=optimized 
out) at conf.c:234
#14 0x00435771 in cslchCallHdlr (ppConfLine=0x7fffa858, 
pThis=optimized out) at cfsysline.c:724
#15 processCfSysLineCommand (pCmdName=optimized out, p=0x7fffa898) at 
cfsysline.c:936
#16 0x004166b1 in cfsysline (p=0x7fffa99f /etc/rsyslog.d/*.conf) 
at conf.c:371
#17 0x00416a29 in cfline (line=0x7fffa991 IncludeConfig 
/etc/rsyslog.d/*.conf, pfCurr=0x7fffa980) at conf.c:1204
#18 0x004171a5 in processConfFile (pConfFile=0x44204c 
/etc/rsyslog.conf) at conf.c:464
#19 0x0040aa53 in init () at syslogd.c:1620
#20 0x0040e0ce in mainThread () at syslogd.c:2179
#21 realMain (argc=optimized out, argv=optimized out) at syslogd.c:2914
#22 0x771fc76d in __libc_start_main (main=0x40af80 main, argc=2, 
ubp_av=0x7fffe508, init=optimized out, 
fini=optimized out, rtld_fini=optimized out, stack_end=0x7fffe4f8) 
at libc-start.c:226
#23 0x0040afc9 in _start ()

Now of course, you need our syslog config.

cat /etc/rsyslog.conf
$PreserveFQDN on

$ModLoad imuxsock
$ModLoad imklog
$ModLoad immark

$umask 

$CreateDirs on

$DirOwner root
$DirGroup root
$DirCreateMode 0755

$EscapeControlCharactersOnReceive off

$FileOwner root
$FileGroup root
$FileCreateMode 0644

$MarkMessagePeriod 600

$IncludeConfig /etc/rsyslog.d/*.conf

antarus@antarus-z620:/var/lib/chaps$ cat /etc/rsyslog.d/40-loghost-
client.conf

$WorkDirectory /var/spool/rsyslog
$ActionQueueFileName loghost-client
$ActionQueueCheckpointInterval 100
  # A 10µs delay effects a rate limit of 10 messages per second.
$ActionQueueDequeueSlowdown 10
  $ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionQueueType LinkedList
# Do not suspend the retry on machines assumed to be connected
# (I.e., stick to once per second.)
$ActionResumeRetryCount -1
$ActionResumeInterval 1

*.* @@REDACTED_LOGHOST.:514;RSYSLOG_ForwardFormat

I will attach the busted spool files as well.

root@antarus-z620:/etc# lsb_release -rd
Description:Ubuntu 12.04.2 LTS
Release:12.04

root@antarus-z620:/etc# apt-cache policy rsyslog
rsyslog:
  Installed: 5.8.6-1ubuntu8.5
  Candidate: 5.8.6-1ubuntu8.5

I expect rsyslog to not crash, and instead detect bad spool files and
tell me.

Instead it crashed.

** Affects: rsyslog (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1233441

Title:
  rsyslogd crashes when the spool is corrupted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1233441/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1004775] Re: NetworkManager restarts dnsmasq and adds host route on every IPv6 route lookup

2013-08-30 Thread Alec Warner
I am the replacement for Steve Atwell (who no longer does Goobuntu
stuff.) This package fixes the issue for me.

-A

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dnsmasq in Ubuntu.
https://bugs.launchpad.net/bugs/1004775

Title:
  NetworkManager restarts dnsmasq and adds host route on every IPv6
  route lookup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1004775/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1004775] Re: NetworkManager restarts dnsmasq and adds host route on every IPv6 route lookup

2013-08-30 Thread Alec Warner
I am the replacement for Steve Atwell (who no longer does Goobuntu
stuff.) This package fixes the issue for me.

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1004775

Title:
  NetworkManager restarts dnsmasq and adds host route on every IPv6
  route lookup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1004775/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 913857] Re: ntp-keygen documentation lists options that ntp-keygen does not support

2013-08-01 Thread Alec Warner
man ntp-wait also lists the '-f' flag, which is not a real flag (same source 
package I believe.) Let me know if you want a separate bug for it.
antarus@host$ man ntp-wait
NTPQ(8) 
  NTPQ(8)

NAME
   ntp-wait - wait for NTP server to synchronize

SYNOPSIS
   ntp-wait [ -f ] [ -n tries ] [ -s sleep ] [ -v ]

DESCRIPTION
   ntp-wait  waits until the locally running ntpd is in state 4 
(synchronized).  This could be useful at boot time, to delay the boot
   sequence until after ntpd -g has set the time.

OPTIONS
   -f Force hard failure if state is unknown.
 I omitted the rest ..

antarus@host$ ntp-wait -f -n 100 -s 3 -v
Unknown option: f
Waiting for ntpd to synchronize... OK!

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ntp in Ubuntu.
https://bugs.launchpad.net/bugs/913857

Title:
  ntp-keygen documentation lists options that ntp-keygen does not
  support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/913857/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 913857] Re: ntp-keygen documentation lists options that ntp-keygen does not support

2013-08-01 Thread Alec Warner
man ntp-wait also lists the '-f' flag, which is not a real flag (same source 
package I believe.) Let me know if you want a separate bug for it.
antarus@host$ man ntp-wait
NTPQ(8) 
  NTPQ(8)

NAME
   ntp-wait - wait for NTP server to synchronize

SYNOPSIS
   ntp-wait [ -f ] [ -n tries ] [ -s sleep ] [ -v ]

DESCRIPTION
   ntp-wait  waits until the locally running ntpd is in state 4 
(synchronized).  This could be useful at boot time, to delay the boot
   sequence until after ntpd -g has set the time.

OPTIONS
   -f Force hard failure if state is unknown.
 I omitted the rest ..

antarus@host$ ntp-wait -f -n 100 -s 3 -v
Unknown option: f
Waiting for ntpd to synchronize... OK!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/913857

Title:
  ntp-keygen documentation lists options that ntp-keygen does not
  support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/913857/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1206182] [NEW] flashplugin-nonfree should recommend libhal

2013-07-29 Thread Alec Warner
Public bug reported:

http://helpx.adobe.com/x-productkb/multi/flash-player-11-problems-
playing.html#id_48891 says that libhal is required to play Protected
video content, it would be nice if libhal was either suggested or
recommended so that worked on Precise.


antarus@host:~$ lsb_release -a
LSB Version:
core-2.0-amd64:core-2.0-noarch:core-3.0-amd64:core-3.0-noarch:core-3.1-amd64:core-3.1-noarch:core-3.2-amd64:core-3.2-noarch:core-4.0-amd64:core-4.0-noarch:cxx-3.0-amd64:cxx-3.0-noarch:cxx-3.1-amd64:cxx-3.1-noarch:cxx-3.2-amd64:cxx-3.2-noarch:cxx-4.0-amd64:cxx-4.0-noarch:desktop-3.1-amd64:desktop-3.1-noarch:desktop-3.2-amd64:desktop-3.2-noarch:desktop-4.0-amd64:desktop-4.0-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.0-amd64:graphics-3.0-noarch:graphics-3.1-amd64:graphics-3.1-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-3.2-amd64:printing-3.2-noarch:printing-4.0-amd64:printing-4.0-noarch:qt4-3.1-amd64:qt4-3.1-noarch
Distributor ID: Ubuntu
Description:Ubuntu 12.04.2 LTS
Release:12.04
Codename:   precise

antarus@host:~$ apt-cache policy flashplugin-installer
flashplugin-installer:
  Installed: (none)
  Candidate: 11.2.202.297ubuntu0.12.04.1
  Version table:
 11.2.202.297ubuntu0.12.04.1 0
600 https://my-apt-mirror.com ubuntu-precise-base/main amd64 Packages

3) I expect to be able to play protected content when I install flash.
4) libhal was missing, causing play of protected content to not function.

** Affects: flashplugin-nonfree (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1206182

Title:
  flashplugin-nonfree should recommend libhal

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/flashplugin-nonfree/+bug/1206182/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1011073] Re: NetworkManager submenus sometimes unpopulated

2013-07-11 Thread Alec Warner
The precise SRU is verified and has waiting the minimum 7 days, can it
be put into updates?

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1011073

Title:
  NetworkManager submenus sometimes unpopulated

To manage notifications about this bug go to:
https://bugs.launchpad.net/libdbusmenu/+bug/1011073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1191993] [NEW] net-retriever relies on MD5SUMs, should use SHA256

2013-06-17 Thread Alec Warner
Public bug reported:

I was trying to get d-i to use my new shiny (not yet released) mirror
setup. During testing, I noticed that net-retriever was failing to parse
my Release files because my MD5Sum: lines were MD5Sum: $ and not the
expected MD5Sum:$.

I fixed the bug in my Release file generator and moved on. However, net-
retriever should probably be switched to rely on stronger checksums that
are less prone to collisions than MD5Sum.

Then I downloaded lp:ubuntu/net-retriever and verified that it was still
vulnerable.

I am using net-retriever from Precise (1.29ubuntu1).

I don't think we care too much if it is fixed in Precise, but it should
be fixed before T.

-A

** Affects: net-retriever (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1191993

Title:
  net-retriever relies on MD5SUMs, should use SHA256

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-retriever/+bug/1191993/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 861268] Re: text corruption in terminals (xterm, urxvt) and emacs

2013-06-06 Thread Alec Warner
Man I hate launchpad.

is this https://bugzilla.gnome.org/show_bug.cgi?id=664858?

-A

** Also affects: ubuntu-gnome
   Importance: Undecided
   Status: New

** No longer affects: ubuntu-gnome

** Bug watch added: GNOME Bug Tracker #664858
   https://bugzilla.gnome.org/show_bug.cgi?id=664858

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/861268

Title:
  text corruption in terminals (xterm, urxvt) and emacs

To manage notifications about this bug go to:
https://bugs.launchpad.net/compiz/+bug/861268/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 972324] Re: server fails to start up if TMPDIR is set to something on a different filesystem from /var/lib/xkb

2013-03-25 Thread Alec Warner
There may also exist a security issue, where user alice creates
specially crafted keymaps in /tmp/$HASH.xkm and then user bob launched X
and the X system tries to re-use alice's evil keymap.

I'm unsure if the X server keymap loader is exploitable, but it is
likely that keymaps should not be shared between users in this way (if
nothing else, alice can upload a wacky keymap and bob may not know how
to turn it off.)

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/972324

Title:
  server fails to start up if TMPDIR is set to something on a different
  filesystem from /var/lib/xkb

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/972324/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1033179] Re: Xvfb seems to have hardcoded /tmp

2013-03-25 Thread Alec Warner
*** This bug is a duplicate of bug 972324 ***
https://bugs.launchpad.net/bugs/972324

** This bug has been marked a duplicate of bug 972324
   server fails to start up if TMPDIR is set to something on a different 
filesystem from /var/lib/xkb

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1033179

Title:
  Xvfb seems to have hardcoded /tmp

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1033179/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1125442] [NEW] Always Visible and On Top Windows Steal Focus on Workspace Switch

2013-02-14 Thread Alec Warner
Public bug reported:

1. Open any application (e.g. TextEditor)
2. Right click the title bar
 2a. Select Always on Visible Workspace
3. Right click the title bar
 3a. Select Always on Top
4. Open a different application (e.g. Terminal)
5. Ensure that window has focus
6. Switch workspaces (Notice: the first application now has focus)
7. Return to first workspace (Notice: the second application does not regain 
focus)

Expected:

The initial application should not have ever regained focus, and
certainly the second application should have it when returning to that
workspace.

antarus@mach ~ $ lsb_release -rd
Description:Ubuntu 12.04.1 LTS
Release:12.04

antarus@mach ~ $ apt-cache policy unity
unity:
  Installed: 5.18.0-0ubuntu2
  Candidate: 5.18.0-0ubuntu2
  Version table:

** Affects: unity (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1125442

Title:
  Always Visible and On Top Windows Steal Focus on Workspace Switch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1125442/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1100587] Re: gnome-control-center does not remove system-wide proxy settings from /etc/environment when switch from manual to automatic mode.

2013-02-07 Thread Alec Warner
Fails to verify here. If I select 'Automated' and enter a configuration
URL, and then click on 'Apply System Wide' I do not even get a polkit
prompt for 'admin' access.

Certainly the http_proxy bit in /etc/environment remains.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1100587

Title:
  gnome-control-center does not remove system-wide proxy settings from
  /etc/environment when switch from manual to automatic mode.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1100587/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 806248] Re: unity::TimeUtil::TimeDelta returns an int value which overflows after 24 days of uptime

2013-02-05 Thread Alec Warner
The proposed package is verified to fix the bug on Precise here.

-A

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/806248

Title:
  unity::TimeUtil::TimeDelta returns an int value which overflows after
  24 days of uptime

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/806248/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1108518] Re: lightdm should not rename() .xsession-errors, as it may be a symlink

2013-02-01 Thread Alec Warner
I took a stab at this in the noted branch. my glib is terrible and It
looks like we need to do this twice in session-child.c?

** Branch linked: lp:~antarus/lightdm/bug1108518

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1108518

Title:
  lightdm should not rename() .xsession-errors, as it may be a symlink

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1108518/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1108518] Re: lightdm should not rename() .xsession-errors, as it may be a symlink

2013-01-31 Thread Alec Warner
My point isn't so much that there is a race, or a sec vuln or something.
My point is that on my systems:

$HOME may be on NFS.
$HOME/.xsession-errors is a symlink to /usr/local/home/$USER/.xsession-errors
$HOME/.xsession-errors.old is a symlink to 
/usr/local/home/$USER/.xsession-errors.old

The obvious think is to just call readlink on logfile to canonicalize
the filename.

The readlink manpage specifies a way to do this 'sort of' safely.

lstat(path) # to get the size of the symlink dest.
allocate string of correct size.
readlink(path)

Check that the path we got from readlink was size bytes.

Now obviously the link can be replaced (at readlink()) time, but readlink would 
return EINVAL then.
Once we have the 'canonical' name we can call rename on that.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1108518

Title:
  lightdm should not rename() .xsession-errors, as it may be a symlink

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1108518/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1108518] [NEW] lightdm should not rename() .xsession-errors, as it may be a symlink

2013-01-28 Thread Alec Warner
Public bug reported:

http://bazaar.launchpad.net/~ubuntu-
desktop/lightdm/ubuntu/view/head:/src/session-child.c#L509

Lightdm calls rename() on the xsession-errors file. In our deployment
many of our users have this file as a symlink. Their homedirectory is on
NFS and it will quickly fill their quota with bogus messages.

You should lstat() the file first. If it is a symlink, you can make a
new file at the destination and update the link. I can supply a patch if
you wish.

antarus@goats5:/etc/X11/Xsession.d$ apt-cache policy lightdm
lightdm:
  Installed: 1.2.1-0ubuntu1.1
  Candidate: 1.2.1-0ubuntu1.1
  Version table:

DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION=Ubuntu 12.04.1 LTS
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04

-A

** Affects: lightdm (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1108518

Title:
  lightdm should not rename() .xsession-errors, as it may be a symlink

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1108518/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 778627] Re: In natty, bash completion now quotes shell variable references rather than expanding them

2013-01-18 Thread Alec Warner
I need more details from Quantal users then. Quantals' bash has
bash42-029.diff, which fixes the bug in bash that caused a (and I
presume this) problem. It could be Quantal has another bug?

I just downloaded bash_4.2-5ubuntu1_amd64.deb and could not reproduce.
What version of bash are you using?

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/778627

Title:
  In natty, bash completion now quotes shell variable references rather
  than expanding them

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/778627/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 778627] Re: In natty, bash completion now quotes shell variable references rather than expanding them

2013-01-17 Thread Alec Warner
Ok:

This bug does not affect Q or R (I checked.)

I make an internal package (for myself), and it resolves the problem.
I've attached a debdiff which creates bash-4.2-2ubuntu2-gg1; it should be 
trivial to modify it to produce bash4.2-2ubuntu3.


** Attachment added: A debdiff that applies bash upstream patch 0029 to bash. 
I merely incremented the patch number (from 24 to 25) because I did not apply 
the intermediate patches. I'm unsure if this is kosher, but patch 29 applied 
cleanly without them.
   
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/778627/+attachment/3486845/+files/bash_4.2-2ubuntu2-gg1.debdiff.txt

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/778627

Title:
  In natty, bash completion now quotes shell variable references rather
  than expanding them

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/778627/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 778627] Re: In natty, bash completion now quotes shell variable references rather than expanding them

2013-01-17 Thread Alec Warner
antarus@antarus-glaptop:~$ cd Downloads/
antarus@antarus-glaptop:~/Downloads$ ls
bash_4.2-0ubuntu4_amd64.deb
bash_4.2-2ubuntu2-gg1.debdiff.txt 
bash_4.2-5ubuntu2_amd64.deb
antarus@antarus-glaptop:~/Downloads$ ar x bash_4.2-0ubuntu4_amd64.deb
antarus@antarus-glaptop:~/Downloads$ ls
bash_4.2-0ubuntu4_amd64.debcontrol.tar.gz
bash_4.2-2ubuntu2-gg1.debdiff.txt  data.tar.gz 
bash_4.2-5ubuntu2_amd64.debdebian-binary
antarus@antarus-glaptop:~/Downloads$ tar -zxf data.tar.gz 
antarus@antarus-glaptop:~/Downloads$ ls
bash_4.2-0ubuntu4_amd64.debcontrol.tar.gz etc   
   typescript.txt
bash_4.2-2ubuntu2-gg1.debdiff.txt  data.tar.gz  usr
bash_4.2-5ubuntu2_amd64.debdebian-binary1_i386.deb
bin
antarus@antarus-glaptop:~/Downloads$ bin/bash 
eantarus@antarus-glaptop:~/Downloads$ echo \$HOME

Oneric also appears affected by this bug.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/778627

Title:
  In natty, bash completion now quotes shell variable references rather
  than expanding them

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/778627/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 896836] Re: Segmentation fault when asking help() for the list of modules

2013-01-16 Thread Alec Warner
On precise we hit this with gtk and osk (part of Onboard.)

Manually importing gtk causes the segfault to go away, but nothing
happens.

The segfault can also be reproduced by:

$ python
Python 2.7.3 (default, Aug  1 2012, 05:14:39)
[GCC 4.6.3] on linux2
Type help, copyright, credits or license for more information.
 from Onboard import osk
 import gtk
/usr/lib/python2.7/dist-packages/gtk-2.0/gtk/__init__.py:40: Warning: 
g_boxed_type_register_static: assertion `g_type_from_name (name) == 0' failed
 from gtk import _gtk

** (python:24631): CRITICAL **: pyg_register_boxed: assertion `boxed_type != 0' 
failed
/usr/lib/python2.7/dist-packages/gtk-2.0/gtk/__init__.py:40: Warning: cannot 
register existing type `GdkDevice'
 from gtk import _gtk
/usr/lib/python2.7/dist-packages/gtk-2.0/gtk/__init__.py:40: Warning: 
g_type_get_qdata: assertion `node != NULL' failed
 from gtk import _gtk
Segmentation fault (core dumped)

So, importing gtk after osk from Onboard causes a segfault.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/896836

Title:
  Segmentation fault when asking help() for the list of modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/pygtk/+bug/896836/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1100587] [NEW] gnome-control-center does not remove system-wide proxy settings from /etc/environment when switch from manual to automatic mode.

2013-01-16 Thread Alec Warner
Public bug reported:

12.04, Unity, on a x220.

Go into system settings = network = Network Proxy = Method = Manual
Set a proxy (I chose 'goats' for the http bit, and 8080 as the port.

Click on 'apply system wide'.

Note that /etc/environment contains 'http_proxy=http://goats:8080;'

Then go into system settings = network = Network Proxy = Method = Automatic
Set my automatic proxy config URL to my companies wpad.dat.
Click on 'apply system wide'

Note that /etc/environment still contains 'http_proxy=http://goats:8080;.
This ends up hosing specific applications that read the proxy from the 
environment, instead of from wherever GNOME stores this data.

Ubuntu 12.04.1 LTS Precise

gnome-control-center-1:3.4.2-0ubuntu0.8 (from precise-updates)

** Affects: gnome-control-center (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1100587

Title:
  gnome-control-center does not remove system-wide proxy settings from
  /etc/environment when switch from manual to automatic mode.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1100587/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1099987] [NEW] /etc/skel/.profile does not detect bash properly

2013-01-15 Thread Alec Warner
Public bug reported:

# ~/.profile: executed by the command interpreter for login shells.
# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
# exists.
# see /usr/share/doc/bash/examples/startup-files for examples.
# the files are located in the bash-doc package.

# the default umask is set in /etc/profile; for setting the umask
# for ssh logins, install and configure the libpam-umask package.
#umask 022

# if running bash
if [ -n $BASH_VERSION ]; then
# include .bashrc if it exists
if [ -f $HOME/.bashrc ]; then
. $HOME/.bashrc
fi
fi

# set PATH so it includes user's private bin if it exists
if [ -d $HOME/bin ] ; then
PATH=$HOME/bin:$PATH
fi

So if I run bash in posix mode or as /bin/sh.

antarus@goats5 /etc/skel $ env -i /bin/sh -c 'echo $BASH_VERSION'
4.2.24(1)-release
antarus@goats5 /etc/skel $ env -i bash --posix -c 'echo $BASH_VERSION'
4.2.24(1)-release

This means when lightdm-session-wrapper sources the users $HOME/.profile
(created from /etc/skel) it will also sources their $HOME/.bashrc.
lightdm-session-wrapper runs as posix sh, and not bash. Sourcing a
.bashrc as posix sh does not work well.

antarus@goats5 ~/antarus $ /bin/sh
sh-4.2$ source ~/.bashrc
sh: `break-posix-sh': not a valid identifier
antarus@goats5 ~/antarus $ grep 'break-posix-sh' ~/.bashrc
function break-posix-sh() {

Functions cannot have dashes in them in posix, but can in bash, for
example.

If you replace the .profile login with something like:

if ! shopt -oq posix; then
# include .bashrc if it exists
if [ -f $HOME/.bashrc ]; then
. $HOME/.bashrc
fi
fi

It seems to work properly.

DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION=Ubuntu 12.04.1 LTS
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04

antarus@goats5 ~/antarus $ apt-cache policy bash
bash:
  Installed: 4.2-2ubuntu2
  Candidate: 4.2-2ubuntu2
  Version table:

If lightdm cannot source my .bashrc, I cannot login. Also, thousands of
my users cannot login.

-A

** Affects: bash (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1099987

Title:
  /etc/skel/.profile does not detect bash properly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1099987/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1097903] [NEW] lightdm-session fails if user's .profile has non-posix sh init.

2013-01-09 Thread Alec Warner
Public bug reported:

I don't actually mind the failure (its a feature!) The problem is that
if the user's .profile has non-posix sh in it (causing /usr/sbin
/lightdm-session to basically crash) there is no good presentation to
the user about this.

The user tries to login.
Lightdm tries to source their ~/.profile, and crashes if they have non-posix sh 
in them.
lightdm simply restarts and drops the user back at the login screen.
There is no reporting to the user what happened, so they can fix the problem.

What is worse, is that the failsafe session doesn't work either.

-A

** Affects: lightdm (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1097903

Title:
  lightdm-session fails if user's .profile has non-posix sh init.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1097903/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1008344] Re: [Precise] Language selector won't allow me to install languages

2012-12-12 Thread Alec Warner
Other users are made 'administrators' via a custom pkla file.

[Configuration]
AdminIdentities=unix-netgroup:REDACTED_NETGROUP_NAME

These users are not in the 'sudo' group, and are not UID 0.

antarus@goats4 $ groups
eng adm cdrom fuse ops guest ops-perm nonconf mrmagoo corp-kernel goobuntu 
tracker-users prism-users

I am not in the sudo group (my sudo group is empty), but I am a
administrator according to polkit.

if you are suggesting that we manually add (via the UI) all the
administrators for the thousands of machines we run...I don't think that
is really a workable solution.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  [Precise] Language selector won't allow me to install languages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1083217] [NEW] Please backport -E discard fixes to e2fs-progs in precise

2012-11-26 Thread Alec Warner
Public bug reported:

I'm running gprecise and have e2fsprogs 1.42-1-ubuntu2 installed.

I ran e2fsck -E discard /dev/sdb1 and it destroyed much of the
filesystem.

I believe the bug that causes data loss is fixed in e2fsprogs 1.42.2.
Related upstream changelog entry follows:

   E2fsck has a number of bugs relating to discard that have been fixed.
(1) Fixed a bug which could cause e2fsck to discard portions of the
inode table which were actually in use. (2) E2fsck will now avoid using
discard if the block device doesn't zero data on discard, since
otherwise this could cause problems if the file system gets corrupted in
the future. (3) E2fsck will now avoid using discard when it is run in
read-only mode. (4) Fixed a bug which caused e2fsck to not issue
discards in the last block group.

Is it possible to bump e2fsprogs to 42.2?

antarus@goats4 ~ $ apt-cache policy e2fsprogs
e2fsprogs:
  Installed: 1.42-1ubuntu2
  Candidate: 1.42-1ubuntu2
  Version table:
 *** 1.42-1ubuntu2 0
600 http://ubuntu-precise.mirror.corp.google.com/ubuntu/ precise/main 
amd64 Packages
100 /var/lib/dpkg/status
antarus@goats4 ~ $ lsb_release -rd
Description:Ubuntu 12.04.1 LTS
Release:12.04

I expect the discard option to not cause data loss.

** Affects: e2fsprogs (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1083217

Title:
  Please backport -E discard fixes to e2fs-progs in precise

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/e2fsprogs/+bug/1083217/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1080890] [NEW] gtk3 file browser slow

2012-11-19 Thread Alec Warner
Public bug reported:

2. What did you attempt to do, or what did you notice was wrong?
I'm attempting to upload a large numbers of files in a browser (I tried both 
chrome and firefox).  I tried uploading 600+ files to Google drive and it hangs 
on the upload screen for 2-5 minutes before starting the upload. It appears 
that the bottleneck is getting the list of files from the file chooser to the 
browser to start processing, not in the actual upload process it self.

3. What was the expected result, or the expected state?
It should exit the upload screen quickly and start the upload

I'm running into this issue on a Precise desktop.  It's not exhibiting
the behavior on Lucid desktops.

The project that I'm working on requires uploading hundreds of files at
once and has worked fine on Lucid.  Now that I've switched to Precise I
am unable to work or iterate quickly, incurring 5-10 minute penalties
after every code change I make.  It's a major work stopping issue for
me.

DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION=Ubuntu 12.04.1 LTS
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04

stracing reveals:

open(/usr/local/google/home/dmillett/.local/share/recently-used.xbel.OB5WNW, 
O_RDWR|O_CREAT|O_EXCL, 0666) = 84
fcntl(84, F_GETFL)  = 0x8002 (flags O_RDWR|O_LARGEFILE)
fstat(84, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
0x7f43cd6ae000
lseek(84, 0, SEEK_CUR)  = 0
write(84, ?xml version=\1.0\ encoding=\UT..., 8114176) = 8114176
write(84, cation name=\Google Chrome\ exec..., 1234) = 1234
fstatfs(84, {f_type=EXT2_SUPER_MAGIC, f_bsize=4096, f_blocks=105852516, 
f_bfree=49581834, f_bavail=44283402, f_files=26492928, f_ffree=24427833, 
f_fsid={-1302100876, 32001381}, f_namelen=255, f_frsize=4096}) = 0
lstat(/usr/local/google/home/dmillett/.local/share/recently-used.xbel, 
{st_mode=S_IFREG|0600, st_size=8115410, ...}) = 0
fsync(84)   = 0
--- SIGPROF (Profiling timer expired) @ 0 (0) ---
close(84)   = 0
munmap(0x7f43cd6ae000, 4096)= 0
rename(/usr/local/google/home/dmillett/.local/share/recently-used.xbel.OB5WNW,
 /usr/local/google/home/dmillett/.local/share/recently-used.xbel) = 0
madvise(0x7f43d99eb000, 8388608, MADV_DONTNEED) = 0
chmod(/usr/local/google/home/dmillett/.local/share/recently-used.xbel, 0600) 
= 0
--- SIGPROF (Profiling timer expired) @ 0 (0) ---

There are thousands of these files (one for every file the user tried to
upload...) and it makes her experience very bad. She ended up following
some instructions at http://cviorel.easyblog.ro/2012/03/07/disable-
recent-documents-in-gtk2gtk3/ to disable 'recent files.' However it
might be nice if this worked better for this use case. The user claims
she routinely uploads 14000+ files to google drive, using her web
browser.

-A

** Affects: ubuntu
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1080890

Title:
  gtk3 file browser slow

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/1080890/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1080890] Re: gtk3 file browser slow

2012-11-19 Thread Alec Warner
** Package changed: ubuntu = gtk+3.0 (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1080890

Title:
  gtk3 file browser slow

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gtk+3.0/+bug/1080890/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1000498] Re: fmod() incorrectly returns NaN for (some?) denormalized inputs

2012-10-16 Thread Alec Warner
its verified, please release it :)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1000498

Title:
  fmod() incorrectly returns NaN for (some?) denormalized inputs

To manage notifications about this bug go to:
https://bugs.launchpad.net/eglibc/+bug/1000498/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 999771] Re: myunity depends upon DISTRIB_RELEASE being the second entry in /etc/lsb-release

2012-10-05 Thread Alec Warner
As an example:

antarus@goats3 ~ $ cat /etc/lsb-release
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION=Ubuntu precise (development branch)
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
GOOGLE_CODENAME=precise
GOOGLE_ID=Goobuntu
GOOGLE_RELEASE=12.04 redacted
GOOGLE_ROLE=desktop
GOOGLE_TRACK=redacted

I'm unsure if this is actually kosher (we have done it for at least 6
years), but the file is basically shell, from my understanding.

-A

On Fri, Oct 5, 2012 at 11:45 AM, Iain Lane i...@orangesquash.org.uk wrote:
 OK I uploaded and accepted it. I'm not sure about the version number (we
 don't really have precedent for this), but it should be alright.

 I'd really appreciate someone backporting these fixes to the precise
 (release) package.

 and you could use pgrep (from procps) instead of that ps | grep -v grep
 stuff ;-).

 --
 You received this bug notification because you are a member of Goobuntu
 Team, which is subscribed to the bug report.
 https://bugs.launchpad.net/bugs/999771

 Title:
   myunity depends upon DISTRIB_RELEASE being the second entry in /etc
   /lsb-release

 Status in MyUnity:
   New
 Status in Precise Backports:
   New
 Status in “myunity” package in Ubuntu:
   Invalid
 Status in “myunity” source package in Precise:
   New
 Status in “myunity” source package in Quantal:
   Won't Fix

 Bug description:
   myunity incorrectly parses the lsb-release file in Main.module.  It makes 
 assumptions about the order of lines.  Since lsb-release is a list of shell 
 variables which can be sourced by other programs, perhaps it would be better 
 to use the shell to parse it, rather than just cat it.  Something more like:
   SHELL source /etc/lsb-release; echo $DISTRIB_RELEASE to Uversion

 To manage notifications about this bug go to:
 https://bugs.launchpad.net/myunity/+bug/999771/+subscriptions

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/999771

Title:
  myunity depends upon DISTRIB_RELEASE being the second entry in /etc
  /lsb-release

To manage notifications about this bug go to:
https://bugs.launchpad.net/myunity/+bug/999771/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 985884] Re: cgroup lite postinst fails (init script doesn't start)

2012-07-12 Thread Alec Warner
Verified.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/985884

Title:
  cgroup lite postinst fails (init script doesn't start)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cgroup-lite/+bug/985884/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 985884] Re: cgroup lite postinst fails (init script doesn't start)

2012-07-10 Thread Alec Warner
Sorry I'll do this today.

-A

On Mon, Jul 9, 2012 at 11:06 PM, Sebastien Bacher seb...@ubuntu.com wrote:
 Could somebody with a setup to test the update check if it's indeed
 resolving the issue so it can be moved to -updates?

 --
 You received this bug notification because you are a member of Goobuntu
 Team, which is subscribed to the bug report.
 https://bugs.launchpad.net/bugs/985884

 Title:
   cgroup lite postinst fails (init script doesn't start)

 Status in “cgroup-lite” package in Ubuntu:
   Fix Released
 Status in “cgroup-lite” source package in Precise:
   Fix Committed
 Status in “cgroup-lite” source package in Quantal:
   Fix Released

 Bug description:
   
   SRU Justification:
   1. Impact: Customized installations which mount cgroups in nonstandard
   locations may cause cgroup-lite to fail to start correctly
   2. Development fix: have cgroup-lite do nothing if cgroups are found mounted
   anywhere at all
   3. Stable fix: same as development fix.
   4. Test case:
  Create an upstart job:
  {{{
  start on starting cgroup-lite
  pre-start script
mkdir -p /mnt2
mount -t cgroup -o freezer freezer /mnt2
  end script
  }}}
  reboot and check whether cgroup-lite is working.  Manually try
  {{{
  stop cgroup-lite; start cgroup-lite
  }}}
  and check for errors
   5. Regression potential: If a system has a mount with 'cgroup' in the
   name which is not a cgroup mount, cgroup-lite will no longer mount cgroups.

   

   Similar symptom to https://bugs.launchpad.net/ubuntu/+source/cgroup-
   lite/+bug/929381, but obviously a different issue:

   $ sudo apt-get install cgroup-lite
   Reading package lists... Done
   Building dependency tree
   Reading state information... Done
   The following NEW packages will be installed:
 cgroup-lite
   0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
   Need to get 0 B/3,490 B of archives.
   After this operation, 46.1 kB of additional disk space will be used.
   Selecting previously unselected package cgroup-lite.
   (Reading database ... 241656 files and directories currently installed.)
   Unpacking cgroup-lite (from .../cgroup-lite_1.1_all.deb) ...
   Processing triggers for ureadahead ...
   Setting up cgroup-lite (1.1) ...
   start: Job failed to start
   invoke-rc.d: initscript cgroup-lite, action start failed.
   dpkg: error processing cgroup-lite (--configure):
subprocess installed post-installation script returned error exit status 1
   Errors were encountered while processing:
cgroup-lite
   E: Sub-process /usr/bin/dpkg returned an error code (1)

   $ sudo start cgroup-lite
   start: Job failed to start

   $ ls -ld /usr/bin/cgroups-mount
   -rwxr-xr-x 1 root root 850 Feb  9 00:56 /usr/bin/cgroups-mount

   $ ls -ld /sys/fs/cgroup
   drwxr-xr-x 2 root root 0 Apr 19 13:37 /sys/fs/cgroup

   $ sudo /usr/bin/cgroups-mount
   mount: cgroup already mounted or /sys/fs/cgroup/cpu busy
   mount: according to mtab, cgroup is mounted on /sys/fs/cgroup

   $ echo $?
   32

   $ mount | grep cgroup
   none on /dev/cgroup/cpu type cgroup (rw,cpu,cpuacct)
   none on /dev/cgroup/devices type cgroup (rw,devices)
   cgroup on /sys/fs/cgroup type tmpfs (rw,uid=0,gid=0,mode=0755)

   $ sudo /usr/bin/cgroups-umount
   umount: cpu: not mounted
   umount: cpuacct: not found
   umount: memory: not found
   umount: devices: not found
   umount: freezer: not found
   umount: net_cls: not found
   umount: perf_event: not found

   $ mount | grep cgroup
   none on /dev/cgroup/cpu type cgroup (rw,cpu,cpuacct)
   none on /dev/cgroup/devices type cgroup (rw,devices)

   $ sudo /usr/bin/cgroups-mount
   mount: cgroup already mounted or /sys/fs/cgroup/cpu busy
   mount: according to mtab, cgroup is mounted on /sys/fs/cgroup

   $ echo $?
   32

 To manage notifications about this bug go to:
 https://bugs.launchpad.net/ubuntu/+source/cgroup-lite/+bug/985884/+subscriptions

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/985884

Title:
  cgroup lite postinst fails (init script doesn't start)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cgroup-lite/+bug/985884/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 933943]

2012-06-07 Thread Alec Warner
(In reply to comment #2)
 Finally merged the fix ;) Please note that there is a small memory leak
 associated with it. I corrected it with this commit:

Yeah sorry, I fixed the memory leak in our internal copy and never sent
you the updated patch. Thanks for merging it.

-A

 
 http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=e593f6a22fbebe7a06dd4b08b378ab5d12e7d8ad
 
 This is to be released with 5.8.12

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/933943

Title:
  rsyslogd please apply patch for large group handling

To manage notifications about this bug go to:
https://bugs.launchpad.net/rsyslog/+bug/933943/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 985884] Re: cgroup lite postinst fails (init script doesn't start)

2012-04-20 Thread Alec Warner
On Thu, Apr 19, 2012 at 8:29 PM, Thomas Bushnell, BSG
985...@bugs.launchpad.net wrote:
 I assume so. But I'm pretty sure we didn't do it. I'll grep when I'm back
 at a keyboard in the morning. Still, package installation should never fail
 for such a reason; this is a general problem with reflecting errors in unit
 scripts back to postinst.

Thomas, our buildtools stuff does it.

-A

 On Apr 19, 2012 7:40 PM, Steve Langasek steve.langa...@canonical.com
 wrote:

 Hi Thomas,

 Does this mean something else on your system had already mounted
 cgroups?

 --
 You received this bug notification because you are a member of Goobuntu
 Team, which is subscribed to the bug report.
 https://bugs.launchpad.net/bugs/985884

 Title:
  cgroup lite postinst fails (init script doesn't start)

 Status in “cgroup-lite” package in Ubuntu:
  New

 Bug description:
  Similar symptom to https://bugs.launchpad.net/ubuntu/+source/cgroup-
  lite/+bug/929381, but obviously a different issue:

  $ sudo apt-get install cgroup-lite
  Reading package lists... Done
  Building dependency tree
  Reading state information... Done
  The following NEW packages will be installed:
    cgroup-lite
  0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
  Need to get 0 B/3,490 B of archives.
  After this operation, 46.1 kB of additional disk space will be used.
  Selecting previously unselected package cgroup-lite.
  (Reading database ... 241656 files and directories currently installed.)
  Unpacking cgroup-lite (from .../cgroup-lite_1.1_all.deb) ...
  Processing triggers for ureadahead ...
  Setting up cgroup-lite (1.1) ...
  start: Job failed to start
  invoke-rc.d: initscript cgroup-lite, action start failed.
  dpkg: error processing cgroup-lite (--configure):
   subprocess installed post-installation script returned error exit status
 1
  Errors were encountered while processing:
   cgroup-lite
  E: Sub-process /usr/bin/dpkg returned an error code (1)

  $ sudo start cgroup-lite
  start: Job failed to start

  $ ls -ld /usr/bin/cgroups-mount
  -rwxr-xr-x 1 root root 850 Feb  9 00:56 /usr/bin/cgroups-mount

  $ ls -ld /sys/fs/cgroup
  drwxr-xr-x 2 root root 0 Apr 19 13:37 /sys/fs/cgroup

  $ sudo /usr/bin/cgroups-mount
  mount: cgroup already mounted or /sys/fs/cgroup/cpu busy
  mount: according to mtab, cgroup is mounted on /sys/fs/cgroup

  $ echo $?
  32

  $ mount | grep cgroup
  none on /dev/cgroup/cpu type cgroup (rw,cpu,cpuacct)
  none on /dev/cgroup/devices type cgroup (rw,devices)
  cgroup on /sys/fs/cgroup type tmpfs (rw,uid=0,gid=0,mode=0755)

  $ sudo /usr/bin/cgroups-umount
  umount: cpu: not mounted
  umount: cpuacct: not found
  umount: memory: not found
  umount: devices: not found
  umount: freezer: not found
  umount: net_cls: not found
  umount: perf_event: not found

  $ mount | grep cgroup
  none on /dev/cgroup/cpu type cgroup (rw,cpu,cpuacct)
  none on /dev/cgroup/devices type cgroup (rw,devices)

  $ sudo /usr/bin/cgroups-mount
  mount: cgroup already mounted or /sys/fs/cgroup/cpu busy
  mount: according to mtab, cgroup is mounted on /sys/fs/cgroup

  $ echo $?
  32

 To manage notifications about this bug go to:

 https://bugs.launchpad.net/ubuntu/+source/cgroup-lite/+bug/985884/+subscriptions


 --
 You received this bug notification because you are a member of Goobuntu
 Team, which is subscribed to the bug report.
 https://bugs.launchpad.net/bugs/985884

 Title:
  cgroup lite postinst fails (init script doesn't start)

 Status in “cgroup-lite” package in Ubuntu:
  New

 Bug description:
  Similar symptom to https://bugs.launchpad.net/ubuntu/+source/cgroup-
  lite/+bug/929381, but obviously a different issue:

  $ sudo apt-get install cgroup-lite
  Reading package lists... Done
  Building dependency tree
  Reading state information... Done
  The following NEW packages will be installed:
    cgroup-lite
  0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
  Need to get 0 B/3,490 B of archives.
  After this operation, 46.1 kB of additional disk space will be used.
  Selecting previously unselected package cgroup-lite.
  (Reading database ... 241656 files and directories currently installed.)
  Unpacking cgroup-lite (from .../cgroup-lite_1.1_all.deb) ...
  Processing triggers for ureadahead ...
  Setting up cgroup-lite (1.1) ...
  start: Job failed to start
  invoke-rc.d: initscript cgroup-lite, action start failed.
  dpkg: error processing cgroup-lite (--configure):
   subprocess installed post-installation script returned error exit status 1
  Errors were encountered while processing:
   cgroup-lite
  E: Sub-process /usr/bin/dpkg returned an error code (1)

  $ sudo start cgroup-lite
  start: Job failed to start

  $ ls -ld /usr/bin/cgroups-mount
  -rwxr-xr-x 1 root root 850 Feb  9 00:56 /usr/bin/cgroups-mount

  $ ls -ld /sys/fs/cgroup
  drwxr-xr-x 2 root root 0 Apr 19 13:37 /sys/fs/cgroup

  $ sudo /usr/bin/cgroups-mount
  mount: cgroup already mounted or /sys/fs/cgroup/cpu busy
  mount: according 

[Bug 966765] [NEW] Precise's version of zsh stat()s everything when you run your first command.

2012-03-27 Thread Alec Warner
Public bug reported:

What was the observed behavior:
Zsh on precise wants to stat everything in $PATH when you run your first 
command, so that it only hashes executables.  I tracked this down to a 
regression (and a later fix) in zsh:
It was added in e85349fbf793f18211d9280ca80ec8911e05c708 (Mon Sep 21 09:22:20 
2009 +), and it was defaulted to off in 
c214b86e9456b2e5eda47bc7710ced0c455df70e (Sun Jan 8 16:02:54 2012 +).  The 
most recent release since then is zsh-4.3.16 (5 weeks ago, Mon, 20 Feb 2012 
10:34:18 +).  Ubuntu is using version 4.3.11 (Mon, 20 Dec 2010 16:03:28 
+).

What was expected:
Zsh should not stat everything in $PATH.  With remote filesystems, this can 
take a long time.

What are the steps to reproduce this issue:
1: Mount a remote or otherwise slow filesystem.
2: Create a directory with two things in it: one is an executable named 
my_local_executable, one is a symlink to some file (executable or not) on the 
remote/slow filesystem.
3: Start zsh without any zsh startup files
4: export PATH=directory from step 2
5: In a separate shell, strace the zsh you started, so that you can see it stat 
everything.  Make sure to use the -f flag.
6: In the straced zsh instance, type 'which my_local_executable' (or whatever). 
 The first time something needs data from the PATH variable, it goes and 
stat()s everything in PATH (or at least everything in the same directory, I 
haven't checked, but that's why I said make PATH be just the two items).
7: Witness in the strace output that it calls stat() on directory from step 
2/{my_local_executable,the_symlink}

Either backport the fix or pull in 4.3.16.

** Affects: zsh (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/966765

Title:
  Precise's version of zsh stat()s everything when you run your first
  command.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/zsh/+bug/966765/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 963587] [NEW] Trousers fails to set tpm permissions properly.

2012-03-23 Thread Alec Warner
Public bug reported:


root@antarus-precise:~# apt-get install trousers
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following NEW packages will be installed:
  trousers
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/138 kB of archives.
After this operation, 431 kB of additional disk space will be used.
Selecting previously unselected package trousers.
(Reading database ... 135516 files and directories currently installed.)
Unpacking trousers (from .../trousers_0.3.7-2ubuntu1_amd64.deb) ...
Processing triggers for ureadahead ...
Processing triggers for man-db ...
Setting up trousers (0.3.7-2ubuntu1) ...
Adding system user `tss' (UID 115) ...
Adding new group `tss' (GID 126) ...
Adding new user `tss' (UID 115) with group `tss' ...
Not creating home directory `/var/lib/tpm'.
 * Starting Trusted Computing daemon tcsd
   ...fail!
invoke-rc.d: initscript trousers, action start failed.
dpkg: error processing trousers (--configure):
 subprocess installed post-installation script returned error exit status 137
Errors were encountered while processing:
 trousers
E: Sub-process /usr/bin/dpkg returned an error code (1)

In the postinst:

configure)
# Adding tss system user
adduser --system --home /var/lib/tpm --shell /bin/false 
--no-create-home --group tss

# Setting owner
chown tss:tss /var/lib/tpm -R
chown tss:tss /etc/tcsd.conf

# Setting permissions
chmod 0600 /etc/tcsd.conf
chmod 0700 /var/lib/tpm

# we ship udev rules, so trigger an update
udevadm trigger --subsystem-match=misc --action=change
udevadm settle

;;

However udev seems to not like this:

Mar 24 00:39:14 antarus-precise udevd[31861]: specified user 'tss' unknown
Mar 24 00:39:14 antarus-precise udevd[31861]: specified group 'tss' unknown

root@antarus-precise:~# ls -al /dev/tpm0 
crw--- 1 root root 10, 224 Mar 24 00:39 /dev/tpm0

Because the device is not owned correctly, tcsd fails to start and
breaks apt :/

root@antarus-precise:~# lsb_release -rd
Description:Ubuntu precise (development branch)
Release:12.04

Release:12.04
root@antarus-precise:~# apt-cache policy trousers
trousers:
  Installed: 0.3.7-2ubuntu1
  Candidate: 0.3.7-2ubuntu1

I expect the udev rules to take affect, so the daemon can start
properly.

Example:
root@antarus-precise:~# chown tss:tss /dev/tpm0
root@antarus-precise:~# ls -al /dev/tpm0
crw--- 1 tss tss 10, 224 Mar 24 00:39 /dev/tpm0
root@antarus-precise:~# start-stop-daemon --start --user tss --chuid tss --exec 
/usr/sbin/tcsd
root@antarus-precise:~# ps
  PID TTY  TIME CMD
 4038 pts/600:00:00 sudo
 4039 pts/600:00:00 bash
 4686 pts/600:00:00 ps
root@antarus-precise:~# ps -u tss
  PID TTY  TIME CMD
 4685 ?00:00:00 tcsd

What happened instead?
root@antarus-precise:~# apt-get install trousers
Reading package lists... Done
Building dependency tree   
Reading state information... Done
trousers is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue [Y/n]? y
Setting up trousers (0.3.7-2ubuntu1) ...
The system user `tss' already exists. Exiting.
 * Starting Trusted Computing daemon tcsd
   ...fail!
invoke-rc.d: initscript trousers, action start failed.
dpkg: error processing trousers (--configure):
 subprocess installed post-installation script returned error exit status 137
Errors were encountered while processing:
 trousers
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@antarus-precise:~# ls -al /dev/tpm0
crw--- 1 root root 10, 224 Mar 24 00:43 /dev/tpm0

** Affects: trousers (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/963587

Title:
  Trousers fails to set tpm permissions properly.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/trousers/+bug/963587/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 957519] [NEW] auditctl uses wrong syscall to determine uid

2012-03-16 Thread Alec Warner
Public bug reported:

The short story is we have a setuid helper that tries to execute
auditctl.

Example:

antarus@goats2 /tmp $ cat foo.c
#include stdio.h
#include sys/types.h
#include unistd.h

int main(int argc, char ** argv) {
  printf(%d\n, getuid());
  printf(%d\n, geteuid());
  execl(/sbin/auditctl, /sbin/auditctl, -l, (char*)NULL);
}

antarus@goats2 /tmp $ sudo gcc foo.c -o foo
antarus@goats2 /tmp $ sudo chown root:root foo
antarus@goats2 /tmp $ sudo chmod +x foo
antarus@goats2 /tmp $ sudo chmod u+s foo
antarus@goats2 /tmp $ ./foo
505 - my uid
0 - root euid
You must be root to run this program. - failed code.

LSB Version:
core-2.0-amd64:core-2.0-noarch:core-3.0-amd64:core-3.0-noarch:core-3.1-amd64:core-3.1-noarch:core-3.2-amd64:core-3.2-noarch:core-4.0-amd64:core-4.0-noarch:cxx-3.0-amd64:cxx-3.0-noarch:cxx-3.1-amd64:cxx-3.1-noarch:cxx-3.2-amd64:cxx-3.2-noarch:cxx-4.0-amd64:cxx-4.0-noarch:desktop-3.1-amd64:desktop-3.1-noarch:desktop-3.2-amd64:desktop-3.2-noarch:desktop-4.0-amd64:desktop-4.0-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.0-amd64:graphics-3.0-noarch:graphics-3.1-amd64:graphics-3.1-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-3.2-amd64:printing-3.2-noarch:printing-4.0-amd64:printing-4.0-noarch:qt4-3.1-amd64:qt4-3.1-noarch
Distributor ID: Ubuntu
Description:Ubuntu 10.04.2 LTS
Release:10.04
Codename:   lucid

antarus@goats2 /tmp $ apt-cache policy auditd
auditd:
  Installed: 1.7.13-1ubuntu2
  Candidate: 1.7.13-1ubuntu2

This bug is also present on precise:

antarus@antarus-precise:/tmp/audit-1.7.18/src$ apt-cache policy auditd
auditd:
  Installed: 1.7.18-1ubuntu1
  Candidate: 1.7.18-1ubuntu1

Even auditd trunk is affected:
https://fedorahosted.org/audit/browser/trunk/src/auditctl.c

** Affects: audit (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/957519

Title:
  auditctl uses wrong syscall to determine uid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/957519/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 957519] Re: auditctl uses wrong syscall to determine uid

2012-03-16 Thread Alec Warner
With my patch:

antarus@goats2 /tmp $ ./foo
45531
0
LIST_RULES: exit,always dir=/etc/audit (0xa) perm=wa key=etc_audit
LIST_RULES: exit,always watch=/etc/default/auditd perm=wa key=etc_default_auditd
LIST_RULES: exit,always watch=/etc/init.d/auditd perm=wa key=etc_init.d_auditd
LIST_RULES: exit,always watch=/etc/libaudit.conf perm=wa key=etc_libaudit.conf
LIST_RULES: exit,always dir=/etc/audisp (0xb) perm=wa key=etc_audisp
LIST_RULES: exit,always watch=/etc/ssh/ssh_config perm=wa key=ssh
LIST_RULES: exit,always watch=/etc/ssh/sshd_config perm=wa key=ssh
LIST_RULES: exit,always watch=/etc/ssh/ssh_host_dsa_key perm=wa key=ssh
LIST_RULES: exit,always watch=/etc/ssh/ssh_host_rsa_key perm=wa key=ssh
LIST_RULES: exit,always watch=/etc/ssh/ssh_host_key perm=wa key=ssh
LIST_RULES: exit,always watch=/etc/shadow perm=wa key=password
LIST_RULES: exit,always watch=/dev/mem perm=wa key=kernel
LIST_RULES: exit,always arch=3221225534 (0xc03e) filetype=32768 (0x8000) 
a13072 (0xc00) key=chmod syscall=chmod,fchmod
LIST_RULES: exit,always arch=3221225534 (0xc03e) filetype=32768 (0x8000) 
a23072 (0xc00) key=chmod syscall=fchmodat

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/957519

Title:
  auditctl uses wrong syscall to determine uid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/957519/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 957519] Re: auditctl uses wrong syscall to determine uid

2012-03-16 Thread Alec Warner
** Patch added: Change getuid() to geteuid()
   
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/957519/+attachment/2883945/+files/auditd.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/957519

Title:
  auditctl uses wrong syscall to determine uid

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/957519/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 933745] [NEW] Xvfb: any use of the XInput extension causes Xvfb to crash

2012-02-16 Thread Alec Warner
Public bug reported:

Repro steps:
* Run Xvfb -ac :99 in a terminal
* Run DISPLAY=:99 xinput list in a second terminal

Expected:
List of input devices appears (XTest, core). Xvfb continues to run.

Actual:
Xvfb segfaults in first terminal.

This problem affects any user of Xvfb who tries to run a client that
uses the XInput extension.  For example, a user runs a new desktop
session, and a session program tries to enumerate the XInput devices (or
the user has a startup script containing any xinput commands).

There is an upstream patch which I've verified fixes the problem: 
http://cgit.freedesktop.org/xorg/xserver/commit/hw/vfb/InitInput.c?id=0e7703f9b1927328954a2fc87aac6be244819329
The version of Xorg/Xvfb in Precise has this patch (from inspection of the 
source tarball for xvfb package).

We'd like this to be backported to Lucid

** Affects: xorg-server (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: xorg-server (Debian)
 Importance: Unknown
 Status: Unknown

** Bug watch added: Debian Bug tracker #575905
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575905

** Also affects: xorg-server (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575905
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/933745

Title:
  Xvfb: any use of the XInput extension causes Xvfb to crash

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/933745/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 933943] [NEW] rsyslogd please apply patch for large group handling

2012-02-16 Thread Alec Warner
Public bug reported:

http://bugzilla.adiscon.com/show_bug.cgi?id=310

rsyslog uses a static 2048 character buffer to perform group lookups.
Some of us have large groups and need a larger buffer. This patch
repeatedly calls getgrnam_r until it gets a buffer of sufficient size.

-A

** Affects: rsyslog
 Importance: Unknown
 Status: Unknown

** Affects: rsyslog (Ubuntu)
 Importance: Undecided
 Status: New

** Bug watch added: bugzilla.adiscon.com/ #310
   http://bugzilla.adiscon.com/show_bug.cgi?id=310

** Also affects: rsyslog via
   http://bugzilla.adiscon.com/show_bug.cgi?id=310
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/933943

Title:
  rsyslogd please apply patch for large group handling

To manage notifications about this bug go to:
https://bugs.launchpad.net/rsyslog/+bug/933943/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 933943] Re: rsyslogd please apply patch for large group handling

2012-02-16 Thread Alec Warner
This patch is against, HEAD, I still need to verify this patch for Lucid
and Precise.

-A

** Patch added: 0001-call-getgrnam_r-repeatedly-to-get-all-group-members.patch
   
https://bugs.launchpad.net/rsyslog/+bug/933943/+attachment/2747354/+files/0001-call-getgrnam_r-repeatedly-to-get-all-group-members.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/933943

Title:
  rsyslogd please apply patch for large group handling

To manage notifications about this bug go to:
https://bugs.launchpad.net/rsyslog/+bug/933943/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 732990] Re: libpam-krb5 writes to /tmp, does not work when disk is full.

2012-02-05 Thread Alec Warner
Can we get it in Precise?

On Sun, Feb 5, 2012 at 1:31 PM, Russ Allbery r...@debian.org wrote:
 As of libpam-krb5 4.5, the temporary ticket cache will be written to
 ccache_dir rather than /tmp if ccache_dir is set.  This version is in
 Debian (and has been for a little bit), but it looks like it's not yet
 been imported into Ubuntu.

 ** Changed in: libpam-krb5 (Ubuntu)
       Status: New = Fix Committed

 --
 You received this bug notification because you are subscribed to the bug
 report.
 https://bugs.launchpad.net/bugs/732990

 Title:
  libpam-krb5 writes to /tmp, does not work when disk is full.

 Status in “libpam-krb5” package in Ubuntu:
  Fix Committed

 Bug description:
  Binary package hint: libpam-krb5

  When creating a new ticket cache libpam-krb5 stashes the cache in a
  temporary location;

  api-auth.c:        pamret = pamk5_cache_init_random(args, creds);
  api-password.c:        pamret = pamk5_cache_init_random(args, creds);

  in cache.c: pamk5_cache_init_random:
      char cache_name[] = /tmp/krb5cc_pam_XX;
      /* Store the obtained credentials in a temporary cache. */
      pamret = pamk5_cache_mkstemp(args, cache_name);
      if (pamret != PAM_SUCCESS)
          return pamret;

  If /tmp is full this call fails and the entire pam stack will fail.
  When the rootfs is full users kind of expect to be able to do normal
  operations such as unlocking their screen or using sudo to gain root
  access to delete files.

  It would be nice if we could control where the tempfile was written in
  /etc/krb5.conf like many of the other pam options.

  antarus@goats ~/local/libpam-krb5-4.2 $ lsb_release -rd
  Description:    Ubuntu 10.04.1 LTS
  Release:        10.04

  antarus@goats ~/local/libpam-krb5-4.2 $ apt-cache policy libpam-krb5
  libpam-krb5:
    Installed: 4.2-1
    Candidate: 4.2-1

  I expect to be able to configure libpam-krb5 to write to a tmpfs or
  something that is harder to fill up.  An attacker could fill /tmp and
  cause any krb5-based authentication to fail.

 To manage notifications about this bug go to:
 https://bugs.launchpad.net/ubuntu/+source/libpam-krb5/+bug/732990/+subscriptions

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/732990

Title:
  libpam-krb5 writes to /tmp, does not work when disk is full.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libpam-krb5/+bug/732990/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 892233] Re: dhclient on server install CD hangs forever trying to get an IPv6 lease

2012-01-23 Thread Alec Warner
*** This bug is a duplicate of bug 917905 ***
https://bugs.launchpad.net/bugs/917905

** This bug has been marked a duplicate of bug 917905
   netcfg hang bug in autoconfig.c

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/892233

Title:
  dhclient on server install CD hangs forever trying to get an IPv6
  lease

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/892233/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 917905] [NEW] netcfg hang bug in autoconfig.c

2012-01-17 Thread Alec Warner
Public bug reported:

I am working on the Precise alpha (beta?) It appears there is a bug in
netcfg's autoconfig.c.


antarus@goats2 ~ $ rdisc6 eth0
Soliciting ff02::2 (ff02::2) on eth0...

Hop limit :   64 (  0x40)
Stateful address conf.:   No
Stateful other conf.  :  Yes
Router preference :   medium
Router lifetime   : 1800 (0x0708) seconds
Reachable time:  unspecified (0x)
Retransmit time   :  unspecified (0x)
 Source link-layer address: 00:05:73:A0:00:65
 MTU  : 1500 bytes (valid)
 Prefix   : 2620:0:1000:2800::/64
  Valid time  :  2592000 (0x00278d00) seconds
  Pref. time  :   604800 (0x00093a80) seconds
 from fe80::5:73ff:fea0:65

We set Stateful Other conf which correctly tells netcfg to try dhcpv6.
Sadly we don't have dhcpv6 set up yet, so dhclient will never receive a lease. 
netcfg/dhcpv6_timeout is normally set for 15s and this should only impose a 
minor delay for us (until we properly configure our network.) However due to a 
bug in netcfg_dhcpv6() it hangs forever instead.

in netcfg_dhcpv6(...) 
rv = poll_dhcpv6_client(client, interface);

dhcpv6_reader = fdopen(dhcpv6_pipe[0], r);
while (fgets(l, sizeof(l), dhcpv6_reader) != NULL) {

It looks like the code tries to read from dhcpv6_pipe which is the
stdout of the dhclient process. However the client has not actually
received any leases (since we don't run dhcpv6) so the output it is
expecting will never happen and it will hang on the fgets() call. I
think you should check the value of 'rv' to see if we actually got a
lease. If we didn't then we shouldn't try to read from the pipe.

** Affects: netcfg (Ubuntu)
 Importance: Undecided
 Status: Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/917905

Title:
  netcfg hang bug in autoconfig.c

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/917905/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 917905] Re: netcfg hang bug in autoconfig.c

2012-01-17 Thread Alec Warner
I built a custom initrd and tried it here and it solved my issue.

** Patch added: Push dhcpv6_timeout from debconf into dhclient's config. Run 
dhclient with -1 (oneshot) so it will die if it fails to get a lease.
   
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/917905/+attachment/2680023/+files/dhcpv6-netcfg-oneshot.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/917905

Title:
  netcfg hang bug in autoconfig.c

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/917905/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 820134] [NEW] libfontconfig causes SIGBUS due to mmap and NFS interaction.

2011-08-02 Thread Alec Warner
Public bug reported:

https://bugs.freedesktop.org/show_bug.cgi?id=39278

Summarized:

man mmap specifies the occasions when sigbus is sent:

   SIGBUS Attempted  access  to  a  portion  of the buffer that does not 
correspond to the file (for
  example, beyond the end of the file, including the case where 
another  process  has  trun‐
  cated the file).

If users are using homedirectories on NFS; a simple NFS failure may
cause a file size to change.

Users originally reported this problem running eclipse and seeing 3-4
crashes per day.

I believe the workaround we are proposing is to modify
/etc/fonts/fonts.conf

!-- Font cache directory list --

cachedir/var/cache/fontconfig/cachedir
cachedir~/.fontconfig/cachedir
config
and just remove the ~/.fontconfig section (possibly replacing it with something 
on local disk if that is supported.)


antarus@goats2 /etc/fonts $ lsb_release -rd
Description:Ubuntu 10.04.2 LTS
Release:10.04


antarus@goats2 /etc/fonts $ apt-cache policy fontconfig
fontconfig:
  Installed: 2.8.0-2ubuntu1
  Candidate: 2.8.0-2ubuntu1

I expect fontconfig to handle mmap's properly. Upstream is aware of the problem 
but I don't see a fix yet.
The application SIGBUS's

** Affects: fontconfig
 Importance: Unknown
 Status: Unknown

** Affects: fontconfig (Ubuntu)
 Importance: Undecided
 Status: New

** Bug watch added: freedesktop.org Bugzilla #39278
   http://bugs.freedesktop.org/show_bug.cgi?id=39278

** Also affects: fontconfig via
   http://bugs.freedesktop.org/show_bug.cgi?id=39278
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/820134

Title:
  libfontconfig causes SIGBUS due to mmap and NFS interaction.

To manage notifications about this bug go to:
https://bugs.launchpad.net/fontconfig/+bug/820134/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 690929] Re: getent fails to enumerate netgroups that contain multiple groups when the last group is empty

2011-05-18 Thread Alec Warner
On Wed, May 18, 2011 at 1:16 PM, Peter Matulis
peter.matu...@canonical.com wrote:
 I cannot reproduce this (on updated Lucid server and client).

 Server:

 $ cat /etc/netgroup
 group_not_empty (-,alpha,)
 group_empty
 test1 group_not_empty group_empty
 test2 group_empty group_not_empty

 Client:

 $ getent netgroup test1
 test1                 (-, alpha, )

 $ getent netgroup test2
 test2                 (-, alpha, )

 Both:

 $ apt-cache policy libc6
 libc6:
  Installed: 2.11.1-0ubuntu7.8
  Candidate: 2.11.1-0ubuntu7.8

 $ lsb_release -rd
 Description:    Ubuntu 10.04.2 LTS
 Release:        10.04

Curious, I have 'files' for netgroup in /etc/nsswitch.conf, what do you
have?

I can still reliably reproduce on ubuntu7.8 but it might be a bug
specific to libnss_files and many people go with 'compat' on that
line.

-A


 --
 You received this bug notification because you are a direct subscriber
 of the bug.
 https://bugs.launchpad.net/bugs/690929

 Title:
  getent fails to enumerate netgroups that contain multiple groups when
  the last group is empty

 Status in “eglibc” package in Ubuntu:
  New

 Bug description:
  Binary package hint: libc6

  root@goats:/etc# cat /etc/netgroup
  group_not_empty (-,antarus,)
  group_empty
  test1 group_not_empty group_empty
  test2 group_empty group_not_empty

  root@goats:/etc# getent netgroup test1
  test1
  root@goats:/etc# getent netgroup test2
  test2                 (-, antarus, )

  I believe the correct behavior is to list (-, antarus, ) for both
  queries.


  root@goats:/etc# apt-cache policy libc6
  libc6:
    Installed: 2.11.1-0ubuntu7.5
    Candidate: 2.11.1-0ubuntu7.5

  root@goats:/etc# lsb_release -rd
  Description:    Ubuntu 10.04.1 LTS
  Release:        10.04

  I have not been able to successfully compile eglibc with debug symbols
  and trying to track the behavior of __getnetgrent_r is a pain with
  optimized libraries; however this is likely either a bug in
  __getnetgrent_r or a 'feature' of netgroups of which I am not aware.

 To unsubscribe from this bug, go to:
 https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/690929/+subscribe


-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/690929

Title:
  getent fails to enumerate netgroups that contain multiple groups when
  the last group is empty

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 740477] [NEW] kinit should print an error if credentials cache has invalid permissions

2011-03-22 Thread Alec Warner
Public bug reported:

Binary package hint: krb5-user

The obvious use case is a user does something silly such as:

sudo kinit -p principal and promptly makes a root:root ccache file for
the specified principal.

Then the user later tries to kinit as that user and in fact everything
*looks* fine...the kinit doesn't print any errors and returns 0.
However the truth is nothing was done because the ccache is the wrong
permissions.

klist prints an error well enough:


klist: Credentials cache permissions incorrect while setting cache flags 
(ticket cache FILE:/var/run/ccache/krb5cc_45531_DIPCWB)

-A

** Affects: krb5 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/740477

Title:
  kinit should print an error if credentials cache has invalid
  permissions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 732990] [NEW] libpam-krb5 writes to /tmp, does not work when disk is full.

2011-03-22 Thread Alec Warner
On Mon, Mar 21, 2011 at 11:32 PM, Russ Allbery r...@debian.org wrote:
 Alec Warner 732...@bugs.launchpad.net writes:

 When creating a new ticket cache libpam-krb5 stashes the cache in a
 temporary location;

 api-auth.c:        pamret = pamk5_cache_init_random(args, creds);
 api-password.c:        pamret = pamk5_cache_init_random(args, creds);

 in cache.c: pamk5_cache_init_random:
     char cache_name[] = /tmp/krb5cc_pam_XX;
     /* Store the obtained credentials in a temporary cache. */
     pamret = pamk5_cache_mkstemp(args, cache_name);
     if (pamret != PAM_SUCCESS)
         return pamret;

 If /tmp is full this call fails and the entire pam stack will fail.
 When the rootfs is full users kind of expect to be able to do normal
 operations such as unlocking their screen or using sudo to gain root
 access to delete files.

 Well, those are going to fail anyway unless you've configured something
 other than the default location for storing the final ticket cache, since
 the default location for it is also in /tmp.  Usually systems are pretty
 unhappy if there's absolutely no room left in /tmp, and note that root
 logins or anything that's setuid (like sudo) get to use root's additional
 margin of free space, if you didn't disable that when you built the
 filesystem.  But sure, I see what you're saying.

The internal bug that triggered this bug was that a user had locked
his screen and gone off to lunch while a job on his machine filled his
disk.  His screensaver is kerberized, ssh to his workstation is
kerberized, and even his local login is kerberized.  We do not have
accessible root accounts (everyone has to login and then sudo) so he
was forced to reboot boot into single user mode to fix it; it was a
poor failure mode is all.

Yes we set a custom ccache dir.


 It would be nice if we could control where the tempfile was written in
 /etc/krb5.conf like many of the other pam options.

 Yeah, I can do that.  I'll try to get that into the next upstream
 release.

Thanks I appreciate it.


 --
 Russ Allbery (r...@debian.org)               http://www.eyrie.org/~eagle/

 --
 You received this bug notification because you are a member of Goobuntu
 Team, which is a direct subscriber.
 https://bugs.launchpad.net/bugs/732990

 Title:
  libpam-krb5 writes to /tmp, does not work when disk is full.

 Status in “libpam-krb5” package in Ubuntu:
  New

 Bug description:
  Binary package hint: libpam-krb5

  When creating a new ticket cache libpam-krb5 stashes the cache in a
  temporary location;

  api-auth.c:        pamret = pamk5_cache_init_random(args, creds);
  api-password.c:        pamret = pamk5_cache_init_random(args, creds);

  in cache.c: pamk5_cache_init_random:
      char cache_name[] = /tmp/krb5cc_pam_XX;
      /* Store the obtained credentials in a temporary cache. */
      pamret = pamk5_cache_mkstemp(args, cache_name);
      if (pamret != PAM_SUCCESS)
          return pamret;

  If /tmp is full this call fails and the entire pam stack will fail.
  When the rootfs is full users kind of expect to be able to do normal
  operations such as unlocking their screen or using sudo to gain root
  access to delete files.

  It would be nice if we could control where the tempfile was written in
  /etc/krb5.conf like many of the other pam options.

  antarus@goats ~/local/libpam-krb5-4.2 $ lsb_release -rd
  Description:    Ubuntu 10.04.1 LTS
  Release:        10.04

  antarus@goats ~/local/libpam-krb5-4.2 $ apt-cache policy libpam-krb5
  libpam-krb5:
    Installed: 4.2-1
    Candidate: 4.2-1

  I expect to be able to configure libpam-krb5 to write to a tmpfs or
  something that is harder to fill up.  An attacker could fill /tmp and
  cause any krb5-based authentication to fail.


-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/732990

Title:
  libpam-krb5 writes to /tmp, does not work when disk is full.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 740477] [NEW] kinit should print an error if credentials cache has invalid permissions

2011-03-22 Thread Alec Warner
Public bug reported:

Binary package hint: krb5-user

The obvious use case is a user does something silly such as:

sudo kinit -p principal and promptly makes a root:root ccache file for
the specified principal.

Then the user later tries to kinit as that user and in fact everything
*looks* fine...the kinit doesn't print any errors and returns 0.
However the truth is nothing was done because the ccache is the wrong
permissions.

klist prints an error well enough:


klist: Credentials cache permissions incorrect while setting cache flags 
(ticket cache FILE:/var/run/ccache/krb5cc_45531_DIPCWB)

-A

** Affects: krb5 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/740477

Title:
  kinit should print an error if credentials cache has invalid
  permissions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 732990] [NEW] libpam-krb5 writes to /tmp, does not work when disk is full.

2011-03-10 Thread Alec Warner
Public bug reported:

Binary package hint: libpam-krb5

When creating a new ticket cache libpam-krb5 stashes the cache in a
temporary location;

api-auth.c:pamret = pamk5_cache_init_random(args, creds);
api-password.c:pamret = pamk5_cache_init_random(args, creds);

in cache.c: pamk5_cache_init_random:
char cache_name[] = /tmp/krb5cc_pam_XX;
/* Store the obtained credentials in a temporary cache. */
pamret = pamk5_cache_mkstemp(args, cache_name);
if (pamret != PAM_SUCCESS)
return pamret;

If /tmp is full this call fails and the entire pam stack will fail.
When the rootfs is full users kind of expect to be able to do normal
operations such as unlocking their screen or using sudo to gain root
access to delete files.

It would be nice if we could control where the tempfile was written in
/etc/krb5.conf like many of the other pam options.

antarus@goats ~/local/libpam-krb5-4.2 $ lsb_release -rd
Description:Ubuntu 10.04.1 LTS
Release:10.04

antarus@goats ~/local/libpam-krb5-4.2 $ apt-cache policy libpam-krb5
libpam-krb5:
  Installed: 4.2-1
  Candidate: 4.2-1

I expect to be able to configure libpam-krb5 to write to a tmpfs or
something that is harder to fill up.  An attacker could fill /tmp and
cause any krb5-based authentication to fail.

** Affects: libpam-krb5 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/732990

Title:
  libpam-krb5 writes to /tmp, does not work when disk is full.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 664724] Re: rpc.gssd does not handle missing machine credential cache

2011-01-11 Thread Alec Warner
We figured out why this was happening (a race condition on our custom
initscript that creates /var/run/ccache) and we have fixed it
internally.  There is still the case that rpc.gssd does not renew its
credentials; however it is not a important issue now that we have fixed
the race.

-A

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/664724

Title:
  rpc.gssd does not handle missing machine credential cache

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 690929] [NEW] getent fails to enumerate netgroups that contain multiple groups when the last group is empty

2010-12-15 Thread Alec Warner
Public bug reported:

Binary package hint: libc6

r...@goats:/etc# cat /etc/netgroup
group_not_empty (-,antarus,)
group_empty
test1 group_not_empty group_empty
test2 group_empty group_not_empty

r...@goats:/etc# getent netgroup test1
test1
r...@goats:/etc# getent netgroup test2
test2 (-, antarus, ) 

I believe the correct behavior is to list (-, antarus, ) for both
queries.


r...@goats:/etc# apt-cache policy libc6
libc6:
  Installed: 2.11.1-0ubuntu7.5
  Candidate: 2.11.1-0ubuntu7.5

r...@goats:/etc# lsb_release -rd
Description:Ubuntu 10.04.1 LTS
Release:10.04

I have not been able to successfully compile eglibc with debug symbols
and trying to track the behavior of __getnetgrent_r is a pain with
optimized libraries; however this is likely either a bug in
__getnetgrent_r or a 'feature' of netgroups of which I am not aware.

** Affects: eglibc (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: lucid

** Tags added: lucid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/690929

Title:
  getent fails to enumerate netgroups that contain multiple groups when the 
last group is empty

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 664724] [NEW] rpc.gssd does not handle missing machine credential cache

2010-10-21 Thread Alec Warner
Public bug reported:

We use NFSv3 with kerberos authentication.  The filer is a netapp.  The
client is:

Description:Ubuntu 10.04 LTS
Release:10.04

We patch /etc/init/gssd.conf to add extra credential caches:

exec rpc.gssd -d /var/run/ccache:/var/spool/tickets

We enabled extra rpc.gssd logging and received the following:

Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: Full hostname for 'filer.redacted' 
is 'filer.redacted'
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: Full hostname for 'sh12.redacted' 
is 'sh12.redacted'
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: Key table entry not found while 
getting keytab entry for 'root/sh12.redac...@realm'
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: Success getting keytab entry for 
'nfs/sh12.redac...@realm'
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: ERROR: Credentials cache file 
'/var/run/ccache/krb5cc_machine_REALM' not found while initializing credential 
cache 'FILE:/var/run/ccache/krb5cc_machine_REALM'
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: INFO: Credentials in CC 
'FILE:/var/run/ccache/krb5cc_machine_REALM' are good until 1287210700
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: using 
FILE:/var/run/ccache/krb5cc_machine_REALM as credentials cache for machine creds
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: using environment variable to 
select krb5 ccache FILE:/var/run/ccache/krb5cc_machine_REALM
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: creating context using fsuid 0 
(save_uid 0)
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: ERROR: GSS-API: error in 
gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more 
information - Credentials cache file '/var/run/ccache/krb5cc_machine_REALM' not 
found
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: WARNING: Failed while limiting 
krb5 encryption types for user with uid 0
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: WARNING: Failed to create krb5 
context for user with uid 0 with credentials cache 
FILE:/var/run/ccache/krb5cc_machine_REALM for server filer.redacted
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: WARNING: Failed to create krb5 
context for user with uid 0 with any credentials cache for server filer.redacted
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: doing error downcall

Steps to Reproduce:

Install lucid (with sec=krb5 mounts and rpc.gssd enabled...)
mount a sec=krb5 volume (rpc.gssd will generate a krb5cc_machine_REALM 
credential cache properly.)
Delete the credential cache
try to mount another sec=krb5 volume - fails.

This logline:
Oct 15 01:31:40 sh12.redacted rpc.gssd[320]: INFO: Credentials in CC 
'FILE:/var/run/ccache/krb5cc_machine_REALM' are good until 1287210700

Seems to indicate that rpc.gssd is keeping some kind of in-process state
that the credential cache is not expired (and thus good) even if the
credential cache is deleted from under it.

I thought this was fixed upstream in:
http://git.linux-nfs.org/?p=cel/nfs-utils.git;a=commit;h=bd947185cfc7978c562fddf2f14f602c44a5cac9

However when I back-ported the nfs-utils-1.2.2 package (from maverick)
that has this patch applied; however the issue is still repeatable when
running that version.

There is a nagging issue as well as to what exactly is deleting the
credentials cache on my affected machines (this is not normal behavior
and only a small number of machines are affected.)  I hope to get a
better idea of that problem shortly.

** Affects: nfs-utils (Ubuntu)
 Importance: Undecided
 Status: New

-- 
rpc.gssd does not handle missing machine credential cache
https://bugs.launchpad.net/bugs/664724
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs