Bug#941626: buster-pu: package haveged/1.9.1-7

[Nicolas Braud-Santoni]

Control: clone -1 -2
Control: retitle -2 buster-pu: package haveged/1.9.1-7+deb10u1
Control: reassign -2 release.debian.org
Control: severity -2 normal

Dear release team,

On Wed, Oct 16, 2019 at 07:02:17PM +0200, Nicolas Braud-Santoni wrote:
> On Thu, Oct 03, 2019 at 03:34:00AM +0000, Bjarni Ingi Gislason wrote:
> > [...]
> >   Message in the syslog, see Debian bug #911604.  This bug should be
> > visible in the "Bug Reports" page!!! (And not yet archieved).  
> 
> As you pointed out, this is the same issue as bug #911604, which was fixed
> in version 1.9.1-8.
> 
> Thanks for reporting this still occurs in Buster, I will prepare a fix.

I was reported a bug against haveged/1.9.1-7, which makes the package
unuseable as shipped, under sysvinit.

The proposed fix is exactly the same thing as was uploaded as haveged/1.9.1-8:
simply updating the AppArmor profile.  Please find the debdiff enclosed.


Best,

  nicoo

diff -Nru haveged-1.9.1/debian/apparmor-profile 
haveged-1.9.1/debian/apparmor-profile
--- haveged-1.9.1/debian/apparmor-profile       2019-04-16 22:50:20.000000000 
+0200
+++ haveged-1.9.1/debian/apparmor-profile       2019-10-16 21:35:05.000000000 
+0200
@@ -19,5 +19,7 @@
   /sys/devices/system/cpu/cpu*/cache/index*/{type,size,level} r,
   /usr/sbin/haveged mr,
 
+  /run/haveged.pid w,
+
   #include <local/usr.sbin.haveged>
 }
diff -Nru haveged-1.9.1/debian/changelog haveged-1.9.1/debian/changelog
--- haveged-1.9.1/debian/changelog      2019-04-19 18:29:05.000000000 +0200
+++ haveged-1.9.1/debian/changelog      2019-10-16 21:35:05.000000000 +0200
@@ -1,3 +1,16 @@
+haveged (1.9.1-7+deb10u1) buster; urgency=medium
+
+  [ Nicolas Braud-Santoni ]
+  * Configure git-buildpackage for the buster branch.
+
+  [ Cyril Brulebois ]
+  * Update apparmor profile  (Closes: #911604)
+    Add write access to /run/haveged.pid as that would get DENIED when
+    running under sysvinit . That's not an issue when running under
+    systemd as PID file handling isn't needed there.
+
+ -- Nicolas Braud-Santoni <ni...@debian.org>  Wed, 16 Oct 2019 21:35:05 +0200
+
 haveged (1.9.1-7) unstable; urgency=medium
 
   [ Cyril Brulebois ]
diff -Nru haveged-1.9.1/debian/gbp.conf haveged-1.9.1/debian/gbp.conf
--- haveged-1.9.1/debian/gbp.conf       2019-04-16 22:50:20.000000000 +0200
+++ haveged-1.9.1/debian/gbp.conf       2019-10-16 21:35:05.000000000 +0200
@@ -1,2 +1,2 @@
 [DEFAULT]
-debian-branch = master
+debian-branch = buster

signature.asc
Description: PGP signature