Your message dated Wed, 26 Dec 2007 16:22:54 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#453862: fixed in pbuilder 0.177
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: pbuilder
Version: 0.174
Severity: critical

This is critical as the whole system security may be affected.

pbuilder uses the following command to mount devpts:
 mount -t devpts /dev/pts "$BUILDPLACE/dev/pts"

A consultation of the mount man page:
 Mount options for devpts
        The devpts file system is a pseudo file system, traditionally
        mounted on /dev/pts.  In order to acquire a pseudo terminal, a
        process  opens  /dev/ptmx; the number of the pseudo terminal is
        then made available to the process and the pseudo terminal slave
        can be accessed as /dev/pts/<number>.

        uid=value and gid=value This sets the owner or the group of
               newly created PTYs to the specified values. When nothing
               is specified, they will be set to the UID and GID of the
               creating process.  For example, if there is a tty group
               with GID 5, then gid=5 will cause newly created PTYs to
               belong to the tty group.

        mode=value Set the mode of newly created PTYs to the specified
               value.  The default is 0600.  A value of mode=620 and
               gid=5 makes "mesg  y"  the  default  on newly created
               PTYs.

This is wrong (and another bug of the mount package). The default for
the gid is 0 which will end in a explicit of 43(utmp) for xterms which
are setgid 43 or whatever the group of the process is.

So if using the default USEDEVPTS=yes the /dev/pts inside the chroot
will be mounted with no gid setting. As the kernel share for the devpts
fs is shared between all devpts the gid setting of
/etc/init.d/mountdevsubfs.sh gets reseted.

End of the game is that after using pbuilder the devpts has the wrong
mount options.

So please use the same settings than /etc/init.d/mountdevsubfs.sh for
mounting the devpts inside the chroot. (By the way, /proc/mounts don't
show the gid setting.)

- -- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (800, 'stable'), (700, 'testing'), (600, 'unstable'), (500, 
'oldstable'), (60, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.4.35.3
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to 
de_DE)

Versions of packages pbuilder depends on:
ii  cdebootstrap                0.3.15       Bootstrap a Debian system
ii  coreutils                   5.97-5.3     The GNU core utilities
ii  debianutils                 2.17         Miscellaneous utilities specific t
ii  debootstrap                 0.3.3.2etch1 Bootstrap a basic Debian system
ii  gcc                         4:4.1.1-15   The GNU C compiler
ii  wget                        1.10.2-2     retrieves files from the web

Versions of packages pbuilder recommends:
ii  cowdancer                     0.25       Copy-on-write directory tree utili
ii  devscripts                    2.10.11    Scripts to make the life of a Debi
ii  fakeroot                      1.5.10     Gives a fake root environment
ii  sudo                          1.6.8p12-4 Provide limited super user privile

- -- no debconf information

- -- 
Klaus Ethgen                            http://www.ethgen.de/
pub  2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <[EMAIL PROTECTED]>
Fingerprint: D7 67 71 C4 99 A6 D4 FE  EA 40 30 57 3C 88 26 2B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBR1G7PJ+OKpjRpO3lAQITMggAskVi8LkhYFZc5i160qWhzsGLNwulqjLT
Jpxb9Pn7IzMVMAtRKUA47ESEMZ/tMZ5gjmA5I6hQXuKQwc+iOEdMIpsEWX0Ycd1+
VKrpuuOkDKM1AocQuYexEcv+SZZhfNvlrWG7zQOqKOos7FbL9K4K5drYcQRqIjCA
vXzrsMkhzV4SQ+ar0rLkaAzl9yC35AdYhBFJNgbG28aUc9n2kMIHAUHK8Sqn9TMB
EvyHYjcQYJv87ILuL62sxhVQksXzEeGr/iZGnFmXLcVWRHvRXUuhc/kaD/gwEpEZ
qqeULN3SilXqWnO3xpBa2p8HXKIiC2+x2LAOGBmV3BQE+jzt8x75aA==
=K+ZJ
-----END PGP SIGNATURE-----



--- End Message ---
--- Begin Message ---
Source: pbuilder
Source-Version: 0.177

We believe that the bug you reported is fixed in the latest version of
pbuilder, which is due to be installed in the Debian FTP archive:

pbuilder-uml_0.177_amd64.deb
  to pool/main/p/pbuilder/pbuilder-uml_0.177_amd64.deb
pbuilder_0.177.dsc
  to pool/main/p/pbuilder/pbuilder_0.177.dsc
pbuilder_0.177.tar.gz
  to pool/main/p/pbuilder/pbuilder_0.177.tar.gz
pbuilder_0.177_all.deb
  to pool/main/p/pbuilder/pbuilder_0.177_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Junichi Uekawa <[EMAIL PROTECTED]> (supplier of updated pbuilder package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 26 Dec 2007 20:53:24 +0900
Source: pbuilder
Binary: pbuilder pbuilder-uml
Architecture: source all amd64
Version: 0.177
Distribution: unstable
Urgency: low
Maintainer: Debian pbuilder maintenance team <[EMAIL PROTECTED]>
Changed-By: Junichi Uekawa <[EMAIL PROTECTED]>
Description: 
 pbuilder   - personal package builder for Debian packages
 pbuilder-uml - user-mode-linux version of pbuilder
Closes: 453388 453862
Changes: 
 pbuilder (0.177) unstable; urgency=low
 .
   [ Loic Minier ]
   * Run apt-get autoremove after upgrade.
 .
   [ Junichi Uekawa ]
   * python-apt/gdebi based pbuilder-satisfydepends-gdebi (closes:
     #453388)
   * Fix devpts mount permissions (closes: #453862)
   * Document pbuilder-satisfydepends-gebi in manpage
Files: 
 9e41534eec9cf66e4d730e77bf547ffd 859 devel extra pbuilder_0.177.dsc
 d2e17911e2a1ecec90fc35aa96a0d67f 847784 devel extra pbuilder_0.177.tar.gz
 6e290b9dc88d1c891fabb457ef4c5a7c 221710 devel extra pbuilder_0.177_all.deb
 17d01b57fd112ad771f31464adf51936 36592 devel extra pbuilder-uml_0.177_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHckS32Dd9TugeVcERAmQkAJ0V4xipO2F3VNdTnueOv9d3ZUAYkACeP+dK
U3iJXoMU0PfXj13/3BbY1E8=
=3erm
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to