Your message dated Mon, 21 Oct 2024 17:50:32 +0000
with message-id <[email protected]>
and subject line Bug#1081589: Removed package(s) from unstable
has caused the Debian Bug report #932501,
regarding squid-deb-proxy: daemon does not start due to the conf file not being 
allowed by apparmor
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
932501: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932501
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: squid-deb-proxy
Severity: important
Tags: patch

Dear Maintainer,

squid-deb-proxy fails to start due due to the conf file not being allowed by
apparmor:
Jul 20 16:28:48 Tardis squid: FATAL: Unable to open configuration file:
/etc/squid-deb-proxy/squid-deb-proxy.conf: (13) Permission denied
Jul 20 16:28:48 Tardis squid-deb-proxy[10170]:  failed!
Jul 20 16:35:30 Tardis squid-deb-proxy[10276]: Stopping Squid Deb HTTP Proxy:
squid-deb-proxy.
Jul 20 16:35:30 Tardis systemd[1]: squid-deb-proxy.service: Succeeded.
Jul 20 16:35:30 Tardis kernel: [4157921.317296] audit: type=1400
audit(1563597330.601:32): apparmor="DENIED" operation="open"
profile="/usr/sbin/squid" name="/etc/squid-deb-proxy/squid-deb-proxy.conf"
pid=10301 comm="squid" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jul 20 16:35:30 Tardis squid-deb-proxy[10284]: Starting Squid Deb HTTP Proxy:
squid-deb-proxy2019/07/20 16:35:30| FATAL: Unable to open configuration file:
/etc/squid-deb-proxy/squid-deb-proxy.conf: (13) Permission denied

The fix is to add
/etc/squid-deb-proxy/** r,
to
/etc/apparmor.d/usr.sbin.squid

Then
apparmor_parser -r /etc/apparmor.d/usr.sbin.squid
systemctl restart squid-deb-proxy

#And test
dig +nocmd +noall +answer @224.0.0.251 -p 5353 -t ptr _apt_proxy._tcp.local



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

--- End Message ---
--- Begin Message ---
Version: 0.8.16+rm

Dear submitter,

as the package squid-deb-proxy has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1081589

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)

--- End Message ---

Reply via email to