Your message dated Sun, 01 May 2016 11:23:21 +0000
with message-id <[email protected]>
and subject line Bug#822679: fixed in libselinux 2.5-2
has caused the Debian Bug report #822679,
regarding Attempts to mount /proc as a regular user
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
822679: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822679
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libselinux1
Version: 2.5-1
Severity: normal

I discovered after updating today libselinux1 that at every exec, each program
attempts to mount /proc, even if already mounted.

I'm looking at #789218, and still wonder... is it actually the job of
libselinux to mount filesystems?

My guess is that *no* user program should attempt to mount filesystems, EVER.
Moreso if the program in question has no rights to do so (ie, it's not root).

We attempt to mount /proc just to check /proc/filesystems?
Am I reading this right?

-- System Information:
Debian Release: stretch/sid
 APT prefers unstable
 APT policy: (900, 'unstable'), (800, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libselinux1 depends on:
ii  libc6     2.22-7
ii  libpcre3  2:8.38-3.1

libselinux1 recommends no packages.

libselinux1 suggests no packages.

--- End Message ---
--- Begin Message ---
Source: libselinux
Source-Version: 2.5-2

We believe that the bug you reported is fixed in the latest version of
libselinux, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated libselinux package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 30 Apr 2016 11:56:40 +0200
Source: libselinux
Binary: selinux-utils libselinux1 libselinux1-dev ruby-selinux python-selinux 
python3-selinux
Architecture: source amd64
Version: 2.5-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Description:
 libselinux1 - SELinux runtime shared libraries
 libselinux1-dev - SELinux development headers
 python-selinux - Python bindings to SELinux shared libraries
 python3-selinux - Python3 bindings to SELinux shared libraries
 ruby-selinux - Ruby bindings to SELinux shared libraries
 selinux-utils - SELinux utility programs
Closes: 822679
Changes:
 libselinux (2.5-2) unstable; urgency=medium
 .
   * Team upload.
   * d/p/only-mount-procfs-necessary.patch: Only mount /proc if necessary
     (Closes: #822679)
Checksums-Sha1:
 3467299705256ac0e07330531ed1061dffc64f73 2128 libselinux_2.5-2.dsc
 94ac3e29d92824206242b1596ad42191eb9db351 24092 libselinux_2.5-2.debian.tar.xz
 eba9cc792be4d6a5637a90542757e67810ad7d74 181208 
libselinux1-dbgsym_2.5-2_amd64.deb
 bc4ba06e5df653bc98f831644796bdbea8ca1e0c 174168 libselinux1-dev_2.5-2_amd64.deb
 db42778d4e047322c7bb7e581b55fcb323bc3307 97102 libselinux1_2.5-2_amd64.deb
 0ab4bedcbcf6ded7c1b0043d8aea76e67a012a51 188592 
python-selinux-dbgsym_2.5-2_amd64.deb
 a11924fc0182a0cda123cb0c3109c68e210fe92e 170470 python-selinux_2.5-2_amd64.deb
 ba37ed184610fa2e40e1dcb77fccfddae1678720 187898 
python3-selinux-dbgsym_2.5-2_amd64.deb
 3fc8b3bdf525d8a4abfc79663fece93d2faec193 169180 python3-selinux_2.5-2_amd64.deb
 d0e0aeb1e045feab491e859b70ad9f37fecb7ada 148540 
ruby-selinux-dbgsym_2.5-2_amd64.deb
 3b9d2e0eb0549f5d5974c945720a7c21d8b2a65b 72222 ruby-selinux_2.5-2_amd64.deb
 fa0b18361ce3213276a3760ed37bf92a94b50e13 147288 
selinux-utils-dbgsym_2.5-2_amd64.deb
 a75ee25c70bdab1ee4c6400f46bd5fe4ff0f9af6 114766 selinux-utils_2.5-2_amd64.deb
Checksums-Sha256:
 802b3bc4d1619db49b7c042cd1e2c5b29a33868e390bf99c2d3ef261c398c839 2128 
libselinux_2.5-2.dsc
 8de8636748504cce702194e0cf9e287b10b3c7916fdd01c7304a4b22ec2d12e9 24092 
libselinux_2.5-2.debian.tar.xz
 7932372b4a8e053613a79fa4b5b908828141bae42df53ed2220ae3b05f726208 181208 
libselinux1-dbgsym_2.5-2_amd64.deb
 fd469407a83418e06a64414f9fc64bb862bdfe1dcf5f34a71cda756491753c74 174168 
libselinux1-dev_2.5-2_amd64.deb
 6bc9d62ab7c4f284d553e6b54e46b9197b4a44713569d7ad03cfb04999b9f984 97102 
libselinux1_2.5-2_amd64.deb
 e52a5834886b1500ab0114697d00a0b41f681598c61ed8d45e7658cf58fc9153 188592 
python-selinux-dbgsym_2.5-2_amd64.deb
 c44347591019aaf2e1744c95bfee2392c6336d4202b9e12b37009be3b3430a2b 170470 
python-selinux_2.5-2_amd64.deb
 8b444d72f08b1ccf1ba114c9e855f6527ec0bb33906d0cbd4b88de142ea3ab94 187898 
python3-selinux-dbgsym_2.5-2_amd64.deb
 90a04186f95c52bb02f2de8e0628fbc5419a0026e582642190ce1ad84e626bc9 169180 
python3-selinux_2.5-2_amd64.deb
 eaed22d4ee2df15491400231bdb7d13982563ef12a6f892aa8e3e13e776f2d8f 148540 
ruby-selinux-dbgsym_2.5-2_amd64.deb
 4fb89f6e2b686ca4790f9c99a923eee16b9299299fe5d3bd8409172223acdc61 72222 
ruby-selinux_2.5-2_amd64.deb
 95869c97a1f8dc7423cf450ba32b3299129bca435b3e5c33ebd5dd803cde9a0e 147288 
selinux-utils-dbgsym_2.5-2_amd64.deb
 ecc85c4b1820aa7dc18fdc91f9cc5438404573b6b8084893f3fb9992c6e7a3e0 114766 
selinux-utils_2.5-2_amd64.deb
Files:
 18f3d2e333f16f48f5b6f09d0754aba5 2128 libs optional libselinux_2.5-2.dsc
 d6f0f2574aaf089504b38f42c7660499 24092 libs optional 
libselinux_2.5-2.debian.tar.xz
 467f088e07dfc09ba389cf78134d0df1 181208 debug extra 
libselinux1-dbgsym_2.5-2_amd64.deb
 d444ae1e9a5178f03e095e7f9ad5e7d0 174168 libdevel optional 
libselinux1-dev_2.5-2_amd64.deb
 0cb024fe8dab46dc2b491eed76c9195e 97102 libs required 
libselinux1_2.5-2_amd64.deb
 407684699256849ad7b6246ba66a423f 188592 debug extra 
python-selinux-dbgsym_2.5-2_amd64.deb
 55f921f4838639d598e233a79e53ea30 170470 python optional 
python-selinux_2.5-2_amd64.deb
 ad257d41da24523dcaade24038db5c38 187898 debug extra 
python3-selinux-dbgsym_2.5-2_amd64.deb
 3c08834b20e98b14f1975e968b17913c 169180 python optional 
python3-selinux_2.5-2_amd64.deb
 635f41fb604b465a7c55fa947c96d668 148540 debug extra 
ruby-selinux-dbgsym_2.5-2_amd64.deb
 be9c9867ced82a8a94eda14f15049913 72222 ruby optional 
ruby-selinux_2.5-2_amd64.deb
 810ce86b16f6729a66b288ef2d753ff4 147288 debug extra 
selinux-utils-dbgsym_2.5-2_amd64.deb
 0d0fd1d6e462cae04b3ef2da1fa4939c 114766 admin optional 
selinux-utils_2.5-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJXJIMhAAoJEB/FiR66sEPVFQ8H/iCiGn2+xw186l7AIkujyY7m
AwJCTStUeoN2TIBXWLP6yPAxDdYkbqceKD+syu3hHxwC13SS1HXu5ooeALlHNGfJ
Z6nXxYzO8E2SRgnqZemuhTUzR4t06rH2xoVKh3g+tV7neOAZ7N+c8ZA24KkfC+7H
M/mN5zdQGw0CIiUoDCCfvLWQGo47ES3rRWVdB+iSoTfE7EeCS1H5KWoBnv0Sw81C
Cac8dpNLg4TqFWbOXCYc2MHfb1/ln2SCe/XJ3k8ZJUPiLN19w9QgWbnT+qToaDJr
0QMH0zGaLCemEKxQ7sJnLtOjB2D/9qnwZi+d8FhW8NI1GJVsCuMRSMuEJQcySKA=
=fkaE
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel

Reply via email to