Your message dated Sun, 01 May 2016 11:23:21 +0000
with message-id <[email protected]>
and subject line Bug#822679: fixed in libselinux 2.5-2
has caused the Debian Bug report #822679,
regarding Attempts to mount /proc as a regular user
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
822679: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822679
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libselinux1
Version: 2.5-1
Severity: normal
I discovered after updating today libselinux1 that at every exec, each program
attempts to mount /proc, even if already mounted.
I'm looking at #789218, and still wonder... is it actually the job of
libselinux to mount filesystems?
My guess is that *no* user program should attempt to mount filesystems, EVER.
Moreso if the program in question has no rights to do so (ie, it's not root).
We attempt to mount /proc just to check /proc/filesystems?
Am I reading this right?
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (900, 'unstable'), (800, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libselinux1 depends on:
ii libc6 2.22-7
ii libpcre3 2:8.38-3.1
libselinux1 recommends no packages.
libselinux1 suggests no packages.
--- End Message ---
--- Begin Message ---
Source: libselinux
Source-Version: 2.5-2
We believe that the bug you reported is fixed in the latest version of
libselinux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated libselinux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 30 Apr 2016 11:56:40 +0200
Source: libselinux
Binary: selinux-utils libselinux1 libselinux1-dev ruby-selinux python-selinux
python3-selinux
Architecture: source amd64
Version: 2.5-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Description:
libselinux1 - SELinux runtime shared libraries
libselinux1-dev - SELinux development headers
python-selinux - Python bindings to SELinux shared libraries
python3-selinux - Python3 bindings to SELinux shared libraries
ruby-selinux - Ruby bindings to SELinux shared libraries
selinux-utils - SELinux utility programs
Closes: 822679
Changes:
libselinux (2.5-2) unstable; urgency=medium
.
* Team upload.
* d/p/only-mount-procfs-necessary.patch: Only mount /proc if necessary
(Closes: #822679)
Checksums-Sha1:
3467299705256ac0e07330531ed1061dffc64f73 2128 libselinux_2.5-2.dsc
94ac3e29d92824206242b1596ad42191eb9db351 24092 libselinux_2.5-2.debian.tar.xz
eba9cc792be4d6a5637a90542757e67810ad7d74 181208
libselinux1-dbgsym_2.5-2_amd64.deb
bc4ba06e5df653bc98f831644796bdbea8ca1e0c 174168 libselinux1-dev_2.5-2_amd64.deb
db42778d4e047322c7bb7e581b55fcb323bc3307 97102 libselinux1_2.5-2_amd64.deb
0ab4bedcbcf6ded7c1b0043d8aea76e67a012a51 188592
python-selinux-dbgsym_2.5-2_amd64.deb
a11924fc0182a0cda123cb0c3109c68e210fe92e 170470 python-selinux_2.5-2_amd64.deb
ba37ed184610fa2e40e1dcb77fccfddae1678720 187898
python3-selinux-dbgsym_2.5-2_amd64.deb
3fc8b3bdf525d8a4abfc79663fece93d2faec193 169180 python3-selinux_2.5-2_amd64.deb
d0e0aeb1e045feab491e859b70ad9f37fecb7ada 148540
ruby-selinux-dbgsym_2.5-2_amd64.deb
3b9d2e0eb0549f5d5974c945720a7c21d8b2a65b 72222 ruby-selinux_2.5-2_amd64.deb
fa0b18361ce3213276a3760ed37bf92a94b50e13 147288
selinux-utils-dbgsym_2.5-2_amd64.deb
a75ee25c70bdab1ee4c6400f46bd5fe4ff0f9af6 114766 selinux-utils_2.5-2_amd64.deb
Checksums-Sha256:
802b3bc4d1619db49b7c042cd1e2c5b29a33868e390bf99c2d3ef261c398c839 2128
libselinux_2.5-2.dsc
8de8636748504cce702194e0cf9e287b10b3c7916fdd01c7304a4b22ec2d12e9 24092
libselinux_2.5-2.debian.tar.xz
7932372b4a8e053613a79fa4b5b908828141bae42df53ed2220ae3b05f726208 181208
libselinux1-dbgsym_2.5-2_amd64.deb
fd469407a83418e06a64414f9fc64bb862bdfe1dcf5f34a71cda756491753c74 174168
libselinux1-dev_2.5-2_amd64.deb
6bc9d62ab7c4f284d553e6b54e46b9197b4a44713569d7ad03cfb04999b9f984 97102
libselinux1_2.5-2_amd64.deb
e52a5834886b1500ab0114697d00a0b41f681598c61ed8d45e7658cf58fc9153 188592
python-selinux-dbgsym_2.5-2_amd64.deb
c44347591019aaf2e1744c95bfee2392c6336d4202b9e12b37009be3b3430a2b 170470
python-selinux_2.5-2_amd64.deb
8b444d72f08b1ccf1ba114c9e855f6527ec0bb33906d0cbd4b88de142ea3ab94 187898
python3-selinux-dbgsym_2.5-2_amd64.deb
90a04186f95c52bb02f2de8e0628fbc5419a0026e582642190ce1ad84e626bc9 169180
python3-selinux_2.5-2_amd64.deb
eaed22d4ee2df15491400231bdb7d13982563ef12a6f892aa8e3e13e776f2d8f 148540
ruby-selinux-dbgsym_2.5-2_amd64.deb
4fb89f6e2b686ca4790f9c99a923eee16b9299299fe5d3bd8409172223acdc61 72222
ruby-selinux_2.5-2_amd64.deb
95869c97a1f8dc7423cf450ba32b3299129bca435b3e5c33ebd5dd803cde9a0e 147288
selinux-utils-dbgsym_2.5-2_amd64.deb
ecc85c4b1820aa7dc18fdc91f9cc5438404573b6b8084893f3fb9992c6e7a3e0 114766
selinux-utils_2.5-2_amd64.deb
Files:
18f3d2e333f16f48f5b6f09d0754aba5 2128 libs optional libselinux_2.5-2.dsc
d6f0f2574aaf089504b38f42c7660499 24092 libs optional
libselinux_2.5-2.debian.tar.xz
467f088e07dfc09ba389cf78134d0df1 181208 debug extra
libselinux1-dbgsym_2.5-2_amd64.deb
d444ae1e9a5178f03e095e7f9ad5e7d0 174168 libdevel optional
libselinux1-dev_2.5-2_amd64.deb
0cb024fe8dab46dc2b491eed76c9195e 97102 libs required
libselinux1_2.5-2_amd64.deb
407684699256849ad7b6246ba66a423f 188592 debug extra
python-selinux-dbgsym_2.5-2_amd64.deb
55f921f4838639d598e233a79e53ea30 170470 python optional
python-selinux_2.5-2_amd64.deb
ad257d41da24523dcaade24038db5c38 187898 debug extra
python3-selinux-dbgsym_2.5-2_amd64.deb
3c08834b20e98b14f1975e968b17913c 169180 python optional
python3-selinux_2.5-2_amd64.deb
635f41fb604b465a7c55fa947c96d668 148540 debug extra
ruby-selinux-dbgsym_2.5-2_amd64.deb
be9c9867ced82a8a94eda14f15049913 72222 ruby optional
ruby-selinux_2.5-2_amd64.deb
810ce86b16f6729a66b288ef2d753ff4 147288 debug extra
selinux-utils-dbgsym_2.5-2_amd64.deb
0d0fd1d6e462cae04b3ef2da1fa4939c 114766 admin optional
selinux-utils_2.5-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJXJIMhAAoJEB/FiR66sEPVFQ8H/iCiGn2+xw186l7AIkujyY7m
AwJCTStUeoN2TIBXWLP6yPAxDdYkbqceKD+syu3hHxwC13SS1HXu5ooeALlHNGfJ
Z6nXxYzO8E2SRgnqZemuhTUzR4t06rH2xoVKh3g+tV7neOAZ7N+c8ZA24KkfC+7H
M/mN5zdQGw0CIiUoDCCfvLWQGo47ES3rRWVdB+iSoTfE7EeCS1H5KWoBnv0Sw81C
Cac8dpNLg4TqFWbOXCYc2MHfb1/ln2SCe/XJ3k8ZJUPiLN19w9QgWbnT+qToaDJr
0QMH0zGaLCemEKxQ7sJnLtOjB2D/9qnwZi+d8FhW8NI1GJVsCuMRSMuEJQcySKA=
=fkaE
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel