Package: avahi-daemon
Version: 0.8-16
Severity: normal
X-Debbugs-Cc: [email protected]

I've been operating with "disable-publishing=yes" for some years on
Bookworm with only the reflector enabled in order to proxy between
network segments. systemd-resolved is used for mDNS.

Did a dist-upgrade to Trixie two days ago and noticed in the
journal that avahi-daemon is publishing addresses.

Rebuilt the package with -O0 in order for gdb to fully expose symbol
values that are optimised out with -O2.

Despite the config value being correctly read from the config file the
address records are still published:

799                     else if (strcasecmp(p->key, "disable-publishing") == 0)
(gdb) n
800                         c->server_config.disable_publishing = 
is_yes(p->value);
(gdb) p p->value
$24 = 0x555555581870 "yes"
(gdb) n
787                 for (p = g->pairs; p; p = p->pairs_next) {
(gdb) p c->server_config.disable_publishing
$25 = 1

(gdb) c
Continuing.
Found user 'avahi' (UID 112) and group 'avahi' (GID 117).
Successfully dropped root privileges.
[Detaching after fork from child process 178830]
avahi-daemon 0.8 starting up.
WARNING: No NSS support for mDNS detected, consider installing nss-mdns!
Successfully called chroot().
Successfully dropped remaining capabilities.
Loading service file /services/apt-cacher-ng.service.
*** WARNING: Detected another IPv4 mDNS stack running on this host. This makes 
mDNS unreliable and is thus not recommended. ***
*** WARNING: Detected another IPv6 mDNS stack running on this host. This makes 
mDNS unreliable and is thus not recommended. ***
Joining mDNS multicast group on interface SUNNY.IPv6 with address 
2a0d:3344:379:31f0::ff.
New relevant interface SUNNY.IPv6 for mDNS.
Joining mDNS multicast group on interface SUNNY.IPv4 with address 10.254.1.130.
New relevant interface SUNNY.IPv4 for mDNS.
Network interface enumeration completed.
Registering new address record for 2001:db8:379:31f0::ff on SUNNY.*.
Registering new address record for fddc::ff:ff on SUNNY.*.
Registering new address record for 10.254.1.130 on SUNNY.IPv4.
Registering new address record for 2001:db8:379:31f0::ff on SUNNY.*.
Registering new address record for fddc::ff:ff on SUNNY.*.
Registering new address record for 10.254.1.130 on SUNNY.IPv4.
Registering new address record for 2001:db8:379:31f0::ff on SUNNY.*.
Registering new address record for fddc::ff:ff on SUNNY.*.
Registering new address record for 10.254.1.130 on SUNNY.IPv4.
Server startup complete. Host name is sunny.local. Local service cookie is 
3629209186.


-- System Information:
Debian Release: 13.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security-debug'), (500, 
'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), 
(500, 'stable'), (100, 'proposed-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 7.0.0-rc6+debian+tj (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages avahi-daemon depends on:
ii  adduser                         3.152
ii  dbus [default-dbus-system-bus]  1.16.2-2
ii  dbus-broker [dbus-system-bus]   37-2
ii  libavahi-common3                0.8-16
ii  libavahi-core7                  0.8-16
ii  libc6                           2.41-12+deb13u2
ii  libcap2                         1:2.75-10+b8
ii  libdaemon0                      0.14-7.1+b3
ii  libdbus-1-3                     1.16.2-2
ii  libexpat1                       2.7.1-2
ii  libsystemd0                     257.9-1~deb13u1

Versions of packages avahi-daemon recommends:
pn  libnss-mdns  <none>

Versions of packages avahi-daemon suggests:
pn  avahi-autoipd  <none>

-- Configuration Files:
/etc/avahi/avahi-daemon.conf changed:
[server]
use-ipv4=yes
use-ipv6=yes
allow-interfaces=SUNNY
ratelimit-interval-usec=1000000
ratelimit-burst=1000
[wide-area]
enable-wide-area=yes
[publish]
disable-publishing=yes
publish-hinfo=no
publish-workstation=no
[reflector]
enable-reflector=yes
[rlimits]


-- no debconf information

Reply via email to