[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#574510: marked as done (statd running as root after remove/install)

Your message dated Wed, 14 Jul 2010 02:32:38 +0000
with message-id <E1OYrm2-0008VJ-OP@franck.debian.org>
and subject line Bug#574510: fixed in nfs-utils 1:1.2.2-2
has caused the Debian Bug report #574510,
regarding statd running as root after remove/install
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
574510: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574510
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: nfs-common
Version: 1:1.1.2-6lenny1
Severity: normal

Hi,

I noticed on paganini.debian.org that statd was running as root.

Apparently rpc.statd is running as the user who owns /var/lib/nfs/sm.
This is, by default, statd.  However, removing the package (but not
purgning) will also remove that directory, and then re-installing the
package will again create the directory, but now owned by root.

The postinst will not chown it to statd, even tho it probably should.

This is potentially a security issue.

Cheers,
weasel

--- End Message ---
--- Begin Message --- 
Source: nfs-utils
Source-Version: 1:1.2.2-2

We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive:

nfs-common_1.2.2-2_powerpc.deb
  to main/n/nfs-utils/nfs-common_1.2.2-2_powerpc.deb
nfs-kernel-server_1.2.2-2_powerpc.deb
  to main/n/nfs-utils/nfs-kernel-server_1.2.2-2_powerpc.deb
nfs-utils_1.2.2-2.debian.tar.bz2
  to main/n/nfs-utils/nfs-utils_1.2.2-2.debian.tar.bz2
nfs-utils_1.2.2-2.dsc
  to main/n/nfs-utils/nfs-utils_1.2.2-2.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 574510@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Anibal Monsalve Salazar <anibal@debian.org> (supplier of updated nfs-utils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 13 Jul 2010 15:20:17 +1000
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source powerpc
Version: 1:1.2.2-2
Distribution: unstable
Urgency: low
Maintainer: Debian kernel team <debian-kernel@lists.debian.org>
Changed-By: Anibal Monsalve Salazar <anibal@debian.org>
Description: 
 nfs-common - NFS support files common to client and server
 nfs-kernel-server - support for NFS kernel server
Closes: 574510
Changes: 
 nfs-utils (1:1.2.2-2) unstable; urgency=low
 .
   [ Vagrant Cascadian ]
   * Ensure files under /var/lib/nfs/ are owned by statd user.
     Closes: #574510
 .
   [ Anibal Monsalve Salazar ]
   * Fix out-of-date-standards-version
Checksums-Sha1: 
 a7a1ec0dc37d472e8acfd4ede40a4ea32af4ec24 1974 nfs-utils_1.2.2-2.dsc
 8f08a8a3d671f266243f7d6fb4ba5fee42989ed3 33097 nfs-utils_1.2.2-2.debian.tar.bz2
 a06f6d544d22d95987314066b2efd51a927d44c3 165846 nfs-kernel-server_1.2.2-2_powerpc.deb
 d0b36a01c5634560be8f0f516db965b937cc5883 240230 nfs-common_1.2.2-2_powerpc.deb
Checksums-Sha256: 
 9c0cf048074f7fa6ae38aecbe531abe4ac736449eb38d5d7b907b37b44434023 1974 nfs-utils_1.2.2-2.dsc
 a415cdbaaaaa9340ab6c9a39d1b725e5ac8f0886b98db1ccbab05cb5910e4a6e 33097 nfs-utils_1.2.2-2.debian.tar.bz2
 b88b3d57247e356ed12249ad7b13a2f9aaeb00b18ba0d2bada6a4c69d2796bf7 165846 nfs-kernel-server_1.2.2-2_powerpc.deb
 a6f5f60d4b1f53d53852491e6752b965cd3ec78f48039270914ec631cde5b32d 240230 nfs-common_1.2.2-2_powerpc.deb
Files: 
 61e359674156402aa23dc59e103dc089 1974 net standard nfs-utils_1.2.2-2.dsc
 1a3e63e2aeefb8d553369ab15e5b9f5a 33097 net standard nfs-utils_1.2.2-2.debian.tar.bz2
 c26508ce02f24b6cce75845f046b98cf 165846 net optional nfs-kernel-server_1.2.2-2_powerpc.deb
 dc4118430d4468f8d7dc55aa2d496ba2 240230 net standard nfs-common_1.2.2-2_powerpc.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBCAAGBQJMPR9VAAoJEHxWrP6UeJfYFucQAJJ5P8MCDsC5x1Hjuaw54NQs
dkjMIaPvZEAoQ23n3Lwh3rI3KYZ5eFOdXJ8qlzouMpSO+xJchSiUDy8gokZj6bEG
GUValvodxrAQHALL00DK/Ktn/PKLL3qOpaXtFOC89+HboKD4fYVXETtjTxjleEO1
6YUSihqdYWkHCy8/LiP/AdC2bvf/sw7yIPFMmlmvYeB0RB3la7ar2qZDqFq1wcjY
NUyvyPGhaAqIKIjxEGkxhsSU0xfI5LyXgm+qpR0zDWbRHkG+5/u06mNSVeEbRv66
LnEvyUPvtsPOQ49X+1rl8/qKGPcUzPCrQivKgJHU/Dc4IJPd6Ls2cEGlQ0RdwQ6v
CPjWDXfxErDlrz4vARkbLBt43OsArKFbiBcI8ZzPo8DY4Zc8ia4FlA1L883p1R5l
A+ap6lssYK6o6mPYsECsImo5eNoc5ZyxBKYz9RxplNNIHN66EcL/G2tc2uwgaRSv
L+HenxSW+gzuivJEfYqSL3MgN40GAfI6HPDQzBLdUg9zUTBtpQRZdwoLW3a2JBEX
xYBk1pYAjB2SaLzVEi+xb48A1x2Y0g9su/vvBSKvaEJnWnrX+d/rO07dYzfY/eBV
baiE1vNxeHEnGhwlYZvsUetikPx+9OimIrR2zcKoKYNa4d1wF1wFfH9t+dPDMZ8P
IpHJMBXF4Aiv2qbi7rL8
=YDPy
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: