[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#865144: marked as done (libc-bin: /etc/nsswitch.conf is always updated on upgrades (even when no changes))



Your message dated Mon, 31 Jul 2017 17:19:43 +0000
with message-id <E1dcEM3-000BgP-4o@fasolo.debian.org>
and subject line Bug#865144: fixed in glibc 2.24-13
has caused the Debian Bug report #865144,
regarding libc-bin: /etc/nsswitch.conf is always updated on upgrades (even when no changes)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
865144: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865144
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: libc-bin
Version: 2.24-11+deb9u1
Tags: patch

Hello Aurelien et al.

As the subject says, the file /etc/nsswitch.conf is always updated to
the current default on upgrades when it is already the default.

This makes the file to have a different mtime without need,
which is bad for people using tripwire/samhain/etc.

We introduced this bug one year ago, when we moved the file from
base-files:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827105

I can think of at least three ways to fix it, which I append
to this report:

In the first patch, we only modify the file if it's really different.
This is what base-files did for ages and what I initially proposed in
the patch for libc-bin (the bug was introduced by removing the cmp part).

In the second patch, we do consider the md5sum of the current default,
but we just return in such case, so the file is not updated.
This is probably the cleanest patch.

In the third patch, similar to the first one, we just don't check
the md5sum for the current default, and we fall back to the case
where the file has been modified.


I understand that this is not a big problem, but it is otherwise
trivial to fix (and it is formally a regression), so please consider
fixing this in the next upload for stretch, if there is one.

Thanks a lot.
--- a/debian/debhelper.in/libc-bin.postinst
+++ b/debian/debhelper.in/libc-bin.postinst
@@ -32,8 +32,10 @@ update_to_current_default() {
         return
         ;;
     esac
-    echo "Updating $2 to current default."
-    cp -p $1 $2
+    if ! cmp -s $1 $2; then
+      echo "Updating $2 to current default."
+      cp -p $1 $2
+    fi
   fi
 }
 
--- a/debian/debhelper.in/libc-bin.postinst
+++ b/debian/debhelper.in/libc-bin.postinst
@@ -26,6 +26,7 @@ update_to_current_default() {
         ;;
       # base-files 7.3 and libc-bin 2.22-12
       f8e97bf611374634c7cb3a6085503ab5)
+        return
         ;;
       # modified file
       *)
--- a/debian/debhelper.in/libc-bin.postinst
+++ b/debian/debhelper.in/libc-bin.postinst
@@ -25,8 +25,9 @@ update_to_current_default() {
       30b82cb1ce20d480703da2208a4607b4)
         ;;
       # base-files 7.3 and libc-bin 2.22-12
-      f8e97bf611374634c7cb3a6085503ab5)
-        ;;
+      # This is the current default, to be uncommented if it changes again
+      # f8e97bf611374634c7cb3a6085503ab5)
+      #   ;;
       # modified file
       *)
         return

--- End Message ---
--- Begin Message ---
Source: glibc
Source-Version: 2.24-13

We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 865144@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated glibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 31 Jul 2017 16:54:16 +0200
Source: glibc
Binary: libc-bin libc-dev-bin libc-l10n glibc-doc glibc-source locales locales-all nscd multiarch-support libc6 libc6-dev libc6-dbg libc6-pic libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev libc0.3-dbg libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev libc0.1-dbg libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc libc6-dev-sparc libc6-sparc64 libc6-dev-sparc64 libc6-s390 libc6-dev-s390 libc6-amd64 libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 libc6-mips32 libc6-dev-mips32 libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386 libc0.1-dev-i386 libc6-x32 libc6-dev-x32 libc6-xen libc0.3-xen libc6.1-alphaev67 libc0.1-i686 libc0.3-i686 libc6-i686
Architecture: source
Version: 2.24-13
Distribution: unstable
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Description:
 glibc-doc  - GNU C Library: Documentation
 glibc-source - GNU C Library: sources
 libc-bin   - GNU C Library: Binaries
 libc-dev-bin - GNU C Library: Development binaries
 libc-l10n  - GNU C Library: localization files
 libc0.1    - GNU C Library: Shared libraries
 libc0.1-dbg - GNU C Library: detached debugging symbols
 libc0.1-dev - GNU C Library: Development Libraries and Header Files
 libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64
 libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64
 libc0.1-i686 - transitional dummy package
 libc0.1-pic - GNU C Library: PIC archive library
 libc0.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc0.3    - GNU C Library: Shared libraries
 libc0.3-dbg - GNU C Library: detached debugging symbols
 libc0.3-dev - GNU C Library: Development Libraries and Header Files
 libc0.3-i686 - transitional dummy package
 libc0.3-pic - GNU C Library: PIC archive library
 libc0.3-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc0.3-xen - GNU C Library: Shared libraries [Xen version]
 libc6      - GNU C Library: Shared libraries
 libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64
 libc6-dbg  - GNU C Library: detached debugging symbols
 libc6-dev  - GNU C Library: Development Libraries and Header Files
 libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64
 libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64
 libc6-dev-mips32 - GNU C Library: o32 Development Libraries for MIPS
 libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64
 libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64
 libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for ppc64
 libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64
 libc6-dev-s390 - GNU C Library: 32bit Development Libraries for IBM zSeries
 libc6-dev-sparc - GNU C Library: 32bit Development Libraries for SPARC
 libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC
 libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64
 libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64
 libc6-i686 - transitional dummy package
 libc6-mips32 - GNU C Library: o32 Shared libraries for MIPS
 libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64
 libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64
 libc6-pic  - GNU C Library: PIC archive library
 libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64
 libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64
 libc6-s390 - GNU C Library: 32bit Shared libraries for IBM zSeries
 libc6-sparc - GNU C Library: 32bit Shared libraries for SPARC
 libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC
 libc6-udeb - GNU C Library: Shared libraries - udeb (udeb)
 libc6-x32  - GNU C Library: X32 ABI Shared libraries for AMD64
 libc6-xen  - GNU C Library: Shared libraries [Xen version]
 libc6.1    - GNU C Library: Shared libraries
 libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized)
 libc6.1-dbg - GNU C Library: detached debugging symbols
 libc6.1-dev - GNU C Library: Development Libraries and Header Files
 libc6.1-pic - GNU C Library: PIC archive library
 libc6.1-udeb - GNU C Library: Shared libraries - udeb (udeb)
 locales    - GNU C Library: National Language (locale) data [support]
 locales-all - GNU C Library: Precompiled locale data
 multiarch-support - Transitional package to ensure multiarch compatibility
 nscd       - GNU C Library: Name Service Cache Daemon
Closes: 865144 865429 867474 867981 869717
Changes:
 glibc (2.24-13) unstable; urgency=medium
 .
   [ Aurelien Jarno ]
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Fix ld.so segfault on arm64.
     - Fix build with newer binutils.  Closes: #869717.
     - debian/patches/any/submitted-perl-inc.diff: drop, upstreamd.
     - debian/patches/any/local-CVE-2017-1000366-rtld-LD_LIBRARY_PATH.diff:
       drop, upstreamd.
     - debian/patches/any/local-CVE-2017-1000366-rtld-LD_PRELOAD.diff: drop,
       upstreamed.
     - debian/patches/any/local-CVE-2017-1000366-rtld-LD_AUDIT.diff: drop,
       upstreamed.
     - debian/patches/any/cvs-vectorized-strcspn-guards.diff: drop, upstreamed.
     - debian/patches/any/cvs-hwcap-AT_SECURE.diff: drop, upstreamed.
   * debian/rules.d/debhelper.mk: relax the dependency on linux-libc-dev to the
     upstream version.
   * Greek debconf translation update from Vangelis Skarmoutsos.  Closes:
     #867474.
   * Update Dutch debconf translation, by Frans Spiesschaert.  Closes: #867981.
   * debian/debhelper.in/libc-bin.triggers: declare the trigger as
     interest-await.
   * debian/control.in/*: Demote gcc-multilib 'Recommends' to a 'Suggests'.
     Closes: #865429.
 .
   [ Adam Conrad ]
   * debian/patches/arm/submitted-strip-bit-0.diff: Fix ld.so crash on armv7t.
 .
   [ Santiago Vila ]
   * debian/debhelper.in/libc-bin.postinst: do not update /etc/nsswitch.conf
     when its content already matches the default.  Closes: #865144.
Checksums-Sha1:
 afec1429ce6dd48b0ee28a72aae6a66efd90a105 8365 glibc_2.24-13.dsc
 8b1228c0d4797ec5df4617067db436e17574e501 1032708 glibc_2.24-13.debian.tar.xz
 7f4254f7854218c4e5060347a654df192189d883 6952 glibc_2.24-13_source.buildinfo
Checksums-Sha256:
 9153f5a649df40b7007fdc8bdb9e7d076f94bea9d82aa02030814ac8aeac0928 8365 glibc_2.24-13.dsc
 e16db95a1234ffedf8993ae057ccb74cfa19f71ff9dc4fb2fb6c06538786c2e6 1032708 glibc_2.24-13.debian.tar.xz
 3a4f29ef1b407f72ae53ae6e7ea1e667ee4821ba1feba47640f3ee6898f02796 6952 glibc_2.24-13_source.buildinfo
Files:
 d45e5c70b4d291e64334dd0f2b3fe2ab 8365 libs required glibc_2.24-13.dsc
 627918b72dc6612f8a8c07de5240b500 1032708 libs required glibc_2.24-13.debian.tar.xz
 53d054b6813ca4e233fa7426fca12421 6952 libs required glibc_2.24-13_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=5F3g
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: