Bug#689896: lastfmsubmitd is maintained by Debian QA group
Hi Zigo, As lastfmsubmitd is maintained by the Debian QA group, I will just go ahead and upload a new version of lastfmsubmitd with your patch applied. I will request an unblock after the upload. Paul signature.asc Description: OpenPGP digital signature
Bug#652814: lastfmsubmitd: Should we change permissions of /var/log/lastfmsubmitd?
Package: lastfmsubmitd Version: 1.0.6-3 Followup-For: Bug #652814 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The last reporter added the "su" part to logrotate. I am not comfortable with that. I don't understand why /var/log/lastfmsubmitd should be writable by the whole "spool" group. I think that was a mistake by the original maintainer. As I don't know lastfmsubmitd, I like to give others the possibility to add comments. Paul - -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-3-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages lastfmsubmitd depends on: ii adduser3.113+nmu3 ii debconf [debconf-2.0] 1.5.46 ii python 2.7.3~rc2-1 ii python-support 1.0.15 lastfmsubmitd recommends no packages. Versions of packages lastfmsubmitd suggests: pn ears -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlB+oBUACgkQHNUte6r+CGo0wQCeM5Vtyer1L5K6lNSnlcFaMQqV 4PAAn3eGtN3hD2xJtAB4rwbH0+bzSlhc =EvOG -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20121017120957.8328.35254.report...@wollumbin.marsaxlokk.homelinux.org
Bug#690765: lastfmsubmitd: please delete log files on purge
Package: lastfmsubmitd Version: 1.0.6-3 Severity: normal -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Policy 10.8 says: Log files should be removed when the package is purged (but not when it is only removed). This should be done by the postrm script when it is called with the argument purge (see Details of removal and/or configuration purging, Section 6.8). Please do that. - -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-3-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlB+ogUACgkQHNUte6r+CGooLwCdGgstqPf2NlGd7nqFq5LvE862 yk0An0J3B6ksQjaCG3ojbiAOuAv4x47I =c90s -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20121017121817.8265.34301.report...@wollumbin.marsaxlokk.homelinux.org
Processing of lastfmsubmitd_1.0.6-4_amd64.changes
lastfmsubmitd_1.0.6-4_amd64.changes uploaded successfully to localhost along with the files: lastfmsubmitd_1.0.6-4.dsc lastfmsubmitd_1.0.6-4.diff.gz lastfmsubmitd_1.0.6-4_all.deb lastmp_1.0.6-4_all.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1toso9-ow...@franck.debian.org
Bug#689896: marked as done (Ships a folder in /var/run or /var/lock (Policy Manual section 9.3.2))
Your message dated Wed, 17 Oct 2012 12:47:26 +
with message-id
and subject line Bug#689896: fixed in lastfmsubmitd 1.0.6-4
has caused the Debian Bug report #689896,
regarding Ships a folder in /var/run or /var/lock (Policy Manual section 9.3.2)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
689896: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689896
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: lastfmsubmitd
Version: 1.0.6-3
Severity: serious
Tags: patch
Dear Maintainer,
Andreas Beckmann reported in -devel that your package
(as well as 27 others) ships a folder either in /var/run or /var/lock. This
is forbidden by policy.
Lintian detects the problem and warns as follow:
/var/run may be a temporary filesystem, so any directories or files needed
/there must be created dynamically at boot time.
Refer to Debian Policy Manual section 9.3.2 (Writing the scripts) for
details.
Severity: serious, Certainty: possible
Check: files, Type: binary, udeb
which is why I am reporting this bug with severity serious (and there fore,
release critical).
Please fix your package. I have attached what I believe is a good fix the
problem, however, I haven't tried it, and I haven't tested if something more
for creating the necessary folder at runtime should be added. Please make
sure to test before applying the patch blindly.
Cheers,
Thomas Goirand (zigo)
diff -u lastfmsubmitd-1.0.6/debian/lastfmsubmitd.dirs lastfmsubmitd-1.0.6/debian/lastfmsubmitd.dirs
--- lastfmsubmitd-1.0.6/debian/lastfmsubmitd.dirs
+++ lastfmsubmitd-1.0.6/debian/lastfmsubmitd.dirs
@@ -2,3 +2,2 @@
var/log/lastfm
-var/run/lastfm
var/spool/lastfm
diff -u lastfmsubmitd-1.0.6/debian/lastmp.init.d lastfmsubmitd-1.0.6/debian/lastmp.init.d
--- lastfmsubmitd-1.0.6/debian/lastmp.init.d
+++ lastfmsubmitd-1.0.6/debian/lastmp.init.d
@@ -23,6 +23,14 @@
exit 0
fi
+if [ ! -d ${RUNDIR} ] ; then
+ mkdir -p ${RUNDIR} || true
+ if [ -d ${RUNDIR} ] ; then
+ chown ${USER}:${GROUP} ${RUNDIR}
+ chmod 2775 ${RUNDIR}
+ fi
+fi
+
case "$1" in
start)
echo -n "Starting $DESC: "
diff -u lastfmsubmitd-1.0.6/debian/lastfmsubmitd.init.d lastfmsubmitd-1.0.6/debian/lastfmsubmitd.init.d
--- lastfmsubmitd-1.0.6/debian/lastfmsubmitd.init.d
+++ lastfmsubmitd-1.0.6/debian/lastfmsubmitd.init.d
@@ -21,6 +21,14 @@
exit 0
fi
+if [ ! -d ${RUNDIR} ] ; then
+ mkdir -p ${RUNDIR} || true
+ if [ -d ${RUNDIR} ] ; then
+ chown ${USER}:${GROUP} ${RUNDIR}
+ chmod 2775 ${RUNDIR}
+ fi
+fi
+
case "$1" in
start)
echo -n "Starting $DESC: "
diff -u lastfmsubmitd-1.0.6/debian/changelog lastfmsubmitd-1.0.6/debian/changelog
--- lastfmsubmitd-1.0.6/debian/changelog
+++ lastfmsubmitd-1.0.6/debian/changelog
@@ -1,3 +1,10 @@
+lastfmsubmitd (1.0.6-3.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Fixes bad handling of /var/run/lastfm life cycle (Closes: #XX).
+
+ -- Thomas Goirand Sat, 06 Oct 2012 18:41:00 +0800
+
lastfmsubmitd (1.0.6-3) unstable; urgency=low
* QA upload.
diff -u lastfmsubmitd-1.0.6/debian/lastfmsubmitd.postinst lastfmsubmitd-1.0.6/debian/lastfmsubmitd.postinst
--- lastfmsubmitd-1.0.6/debian/lastfmsubmitd.postinst
+++ lastfmsubmitd-1.0.6/debian/lastfmsubmitd.postinst
@@ -45,7 +45,7 @@
db_get lastfmsubmitd/spool_group
if [ "$RET" ]; then
-for dir in /var/log/lastfm /var/run/lastfm /var/spool/lastfm; do
+for dir in /var/log/lastfm /var/spool/lastfm; do
chown "lastfm:$RET" $dir
chmod 2775 $dir
done
--- End Message ---
--- Begin Message ---
Source: lastfmsubmitd
Source-Version: 1.0.6-4
We believe that the bug you reported is fixed in the latest version of
lastfmsubmitd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 689...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Paul Gevers (supplier of updated lastfmsubmitd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Format: 1.8
Date: Wed, 17 Oct 2012 11:19:02 +0200
Source: lastfmsubmitd
Binary: lastfmsubmitd lastmp
Architecture: source all
Version: 1.0.6-4
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group
Changed-By: Paul Gever
lastfmsubmitd_1.0.6-4_amd64.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Wed, 17 Oct 2012 11:19:02 +0200 Source: lastfmsubmitd Binary: lastfmsubmitd lastmp Architecture: source all Version: 1.0.6-4 Distribution: unstable Urgency: low Maintainer: Debian QA Group Changed-By: Paul Gevers Description: lastfmsubmitd - submission daemon for the Last.fm social music network lastmp - MPD client for lastfmsubmitd Closes: 689896 Changes: lastfmsubmitd (1.0.6-4) unstable; urgency=low . [ Thomas Goirand ] * Fixes bad handling of /var/run/lastfm life cycle (Closes: #689896). . [ Paul Gevers ] * Prepare upload Checksums-Sha1: 43764425296f5d640c9535c5d71139ef77434bea 1150 lastfmsubmitd_1.0.6-4.dsc d3eb98697ac9ee2886cb0011680721e89cb78075 17035 lastfmsubmitd_1.0.6-4.diff.gz 013b59e852349dbeaba71d1f6ed36ae89b306d08 31938 lastfmsubmitd_1.0.6-4_all.deb 002d0c639fc3036f15353187869431cbef78c75e 18118 lastmp_1.0.6-4_all.deb Checksums-Sha256: 0fe39059979032a7b5438e867dd75668588299302e3d50674a42f317e106709e 1150 lastfmsubmitd_1.0.6-4.dsc 4cec3f38acd479fcacb303bdc379a4fd9840507847862bb14e8395466bedbc00 17035 lastfmsubmitd_1.0.6-4.diff.gz 81001e8432d492ab4e081f3a07033497a21b8653f2ea7ba6cc3227eb3e7f9ea2 31938 lastfmsubmitd_1.0.6-4_all.deb db528e3cb8c25aca0337b34b4ba8faa44b82cde5b46a2cf60e941aa83a5d67fc 18118 lastmp_1.0.6-4_all.deb Files: 193437ce6e716642ec7ec9ffa7783558 1150 sound optional lastfmsubmitd_1.0.6-4.dsc 359624809b43f97a9089891059047c45 17035 sound optional lastfmsubmitd_1.0.6-4.diff.gz a67b8a33ba3000ab91a66c547b4bb1a9 31938 sound optional lastfmsubmitd_1.0.6-4_all.deb c60da3da9be06a180a08c370edae93ce 18118 sound optional lastmp_1.0.6-4_all.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlB+pWYACgkQHNUte6r+CGpeXgCfV9IrJ1lhiLkvKnaSc/eXGAYp 82cAn2JhU7AOSdG31uPt1oI8AEH4gUgc =dppP -END PGP SIGNATURE- Thank you for your contribution to Debian. -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1tot1y-0003qx...@franck.debian.org
Bug#687597: openslp-dfsg: touch bug CVE-2012-4428
Package: openslp-dfsg Followup-For: Bug #687597 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As far as I can tell, no solution known yet, on 17 October 2012, 15:28 +0200. While going through Debian QA group owned RC bugs, I touched on this bug. http://security-tracker.debian.org/tracker/CVE-2012-4428 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlB+s40ACgkQHNUte6r+CGp99gCfb8V0OkWyTOTq68wZjuK50O/b 9tMAn2wLN1mGAPXS2YM36VgtU2hd0wVV =selz -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20121017133301.9608.69018.report...@wollumbin.marsaxlokk.homelinux.org
Geil, oder?
Sei gegrüßt packages ! Anbei der Banner von dem Forum, welches ich entdeckt habe. Geil, oder? Gruss, Sandra jlguesmr dlfmdhoimql azwkwyeeganqz <>
