--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: bashism in /usr/sbin/start-statd
- From: Martin Steigerwald <ms@teamix.de>
- Date: Wed, 04 May 2011 15:36:52 +0200
- Message-id: <20110504133652.12755.39267.reportbug@localhost.localdomain>
Package: nfs-common
Version: 1:1.2.3-2
Severity: normal
rpcinfo: can't contact portmapper: rpcinfo: RPC: Authentication error; why = Client credential too weak
The package bug script /usr/share/bug/nfs-common/script exited with an error status (return code = 256). Do you still want to file a report? [y|N|q|?]?
reporting nevertheless.
shambhala:~> mount -t nfs -o vers=3 172.21.101.9:/vol/nfstest /mnt/zeit
/bin/sh: Illegal option -p
[...]
shambhala:~> head -1 /usr/sbin/start-statd
#!/bin/sh -p
shambhala:~> ls -l /bin/sh
lrwxrwxrwx 1 root root 4 20. Dez 10:35 /bin/sh -> dash
Without -p the error message does not appear.
-- Package-specific info:
-- rpcinfo --
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (450, 'testing'), (400, 'unstable'), (110, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.38.5-tp42-snapshot-resv-size-dirty (PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.112+nmu2 add and remove users and groups
ii initscripts 2.88dsf-13.5 scripts for initializing and shutt
ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib
ii libcap2 1:2.20-1 support for getting/setting POSIX.
ii libcomerr2 1.41.12-2 common error description library
ii libevent-1.4-2 1.4.13-stable-1 An asynchronous event notification
ii libgssapi-krb5-2 1.9+dfsg-1+b1 MIT Kerberos runtime libraries - k
ii libgssglue1 0.2-2 mechanism-switch gssapi library
ii libk5crypto3 1.9+dfsg-1+b1 MIT Kerberos runtime libraries - C
ii libkrb5-3 1.9+dfsg-1+b1 MIT Kerberos runtime libraries
ii libnfsidmap2 0.24-1 An nfs idmapping library
ii libtirpc1 0.2.1-1 transport-independent RPC library
ii libwrap0 7.6.q-19 Wietse Venema's TCP wrappers libra
ii lsb-base 3.2-27 Linux Standard Base 3.2 init scrip
ii netbase 4.45 Basic TCP/IP networking system
ii rpcbind 0.2.0-6 converts RPC program numbers into
ii ucf 3.0025+nmu2 Update Configuration File: preserv
Versions of packages nfs-common recommends:
ii python 2.6.6-14 interactive high-level object-orie
nfs-common suggests no packages.
-- Configuration Files:
/etc/init.d/nfs-common changed:
DESC="NFS common utilities"
DEFAULTFILE=/etc/default/nfs-common
PREFIX=
NEED_STATD=
NEED_IDMAPD=
NEED_GSSD=
PIPEFS_MOUNTPOINT=/var/lib/nfs/rpc_pipefs
RPCGSSDOPTS=
if [ -f $DEFAULTFILE ]; then
. $DEFAULTFILE
fi
. /lib/lsb/init-functions
[ -x $PREFIX/sbin/rpc.statd ] || exit 0
AUTO_NEED_IDMAPD=no
AUTO_NEED_GSSD=no
if [ -f /etc/fstab ]; then
exec 9<&0 </etc/fstab
while read DEV MTPT FSTYPE OPTS REST
do
case $DEV in
''|\#*)
continue
;;
esac
# FSTYPE "nfs" can be NFSv4 now
#if [ "$FSTYPE" = "nfs4" ]; then
AUTO_NEED_IDMAPD=yes
#fi
case "$OPTS" in
sec=krb5|*,sec=krb5|sec=krb5,*|*,sec=krb5i,*|sec=krb5i|*,sec=krb5i|sec=krb5i,*|*,sec=krb5i,*|sec=krb5p|*,sec=krb5p|sec=krb5p,*|*,sec=krb5p,*)
AUTO_NEED_GSSD=yes
;;
esac
done
exec 0<&9 9<&-
fi
if [ -f /etc/exports ] && grep -q '^[[:space:]]*[^#]*/' /etc/exports; then
AUTO_NEED_IDMAPD=yes
fi
case "$NEED_STATD" in
yes|no)
;;
*)
NEED_STATD=yes
;;
esac
case "$NEED_IDMAPD" in
yes|no)
;;
*)
NEED_IDMAPD=$AUTO_NEED_IDMAPD
;;
esac
case "$NEED_GSSD" in
yes|no)
;;
*)
NEED_GSSD=$AUTO_NEED_GSSD
;;
esac
do_modprobe() {
if [ -x /sbin/modprobe -a -f /proc/modules ]
then
modprobe -q "$1" || true
fi
}
do_mount() {
if ! grep -E -qs "$1\$" /proc/filesystems
then
return 1
fi
if ! mountpoint -q "$2"
then
mount -t "$1" "$1" "$2"
return
fi
return 0
}
do_umount() {
if mountpoint -q "$1"
then
umount "$1"
fi
return 0
}
case "$1" in
start)
log_daemon_msg "Starting $DESC"
if [ "$NEED_STATD" = yes ]; then
log_progress_msg "statd"
# See if portmap or rpcbind are running
(cat </dev/null >/dev/tcp/localhost/111) 2>/dev/null
RET=$?
if [ $RET != 0 ]; then
echo
log_warning_msg "Not starting: portmap daemon is not running"
exit 0
fi
start-stop-daemon --start --oknodo --quiet \
--pidfile /var/run/rpc.statd.pid \
--exec $PREFIX/sbin/rpc.statd -- $STATDOPTS
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
else
mkdir -p /lib/init/rw/sendsigs.omit.d
rm -f /lib/init/rw/sendsigs.omit.d/statd
ln -s /var/run/rpc.statd.pid /lib/init/rw/sendsigs.omit.d/statd
fi
fi
# Don't start idmapd and gssd if we don't have them (say, if /usr is not
# up yet).
[ -x /usr/sbin/rpc.idmapd ] || NEED_IDMAPD=no
[ -x /usr/sbin/rpc.gssd ] || NEED_GSSD=no
if [ "$NEED_IDMAPD" = yes ] || [ "$NEED_GSSD" = yes ]
then
do_modprobe sunrpc
do_modprobe nfs
do_modprobe nfsd
if do_mount rpc_pipefs $PIPEFS_MOUNTPOINT
then
if [ "$NEED_IDMAPD" = yes ]
then
log_progress_msg "idmapd"
start-stop-daemon --start --oknodo --quiet \
--exec /usr/sbin/rpc.idmapd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_GSSD" = yes ]
then
do_modprobe rpcsec_gss_krb5
log_progress_msg "gssd"
# we need this available; better to fail now than
# mysteriously on the first mount
if ! grep -q -E '^nfs[ ]' /etc/services; then
log_action_end_msg 1 "broken /etc/services, please see /usr/share/doc/nfs-common/README.Debian.nfsv4"
exit 1
fi
start-stop-daemon --start --oknodo --quiet \
--exec /usr/sbin/rpc.gssd -- $RPCGSSDOPTS
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
fi
fi
log_end_msg 0
;;
stop)
log_daemon_msg "Stopping $DESC"
if [ "$NEED_GSSD" = yes ]
then
log_progress_msg "gssd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.gssd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_IDMAPD" = yes ]
then
log_progress_msg "idmapd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.idmapd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
if [ "$NEED_STATD" = yes ]
then
log_progress_msg "statd"
start-stop-daemon --stop --oknodo --quiet \
--name rpc.statd
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
exit $RET
fi
fi
do_umount $PIPEFS_MOUNTPOINT 2>/dev/null || true
log_end_msg 0
;;
status)
if [ "$NEED_STATD" = yes ]
then
if ! pidof rpc.statd >/dev/null
then
echo "rpc.statd not running"
exit 3
fi
fi
if [ "$NEED_GSSD" = yes ]
then
if ! pidof rpc.gssd >/dev/null
then
echo "rpc.gssd not running"
exit 3
fi
fi
if [ "$NEED_IDMAPD" = yes ]
then
if ! pidof rpc.idmapd >/dev/null
then
echo "rpc.idmapd not running"
exit 3
fi
fi
echo "all daemons running"
exit 0
;;
restart | force-reload)
$0 stop
sleep 1
$0 start
;;
*)
log_success_msg "Usage: nfs-common {start|stop|status|restart}"
exit 1
;;
esac
exit 0
-- no debconf information
-- debsums errors found:
debsums: changed file /var/lib/nfs/state (from nfs-common package)
--- End Message ---
--- Begin Message ---
Source: nfs-utils
Source-Version: 1:1.2.3-3
We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive:
nfs-common_1.2.3-3_i386.deb
to main/n/nfs-utils/nfs-common_1.2.3-3_i386.deb
nfs-kernel-server_1.2.3-3_i386.deb
to main/n/nfs-utils/nfs-kernel-server_1.2.3-3_i386.deb
nfs-utils_1.2.3-3.debian.tar.bz2
to main/n/nfs-utils/nfs-utils_1.2.3-3.debian.tar.bz2
nfs-utils_1.2.3-3.dsc
to main/n/nfs-utils/nfs-utils_1.2.3-3.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 621027@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luk Claes <luk@debian.org> (supplier of updated nfs-utils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 18 Jun 2011 10:48:28 +0200
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source i386
Version: 1:1.2.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian kernel team <debian-kernel@lists.debian.org>
Changed-By: Luk Claes <luk@debian.org>
Description:
nfs-common - NFS support files common to client and server
nfs-kernel-server - support for NFS kernel server
Closes: 621027 624261 629420
Changes:
nfs-utils (1:1.2.3-3) unstable; urgency=medium
.
[ Luk Claes ]
* Remove build dependency on librpcsecgss-dev as it's superseded by
libtirpc-dev
* Remove very old versioned dependencies on netbase and libblkid1
* Exclude state files from dh_md5sum
* Use rpcinfo instead of /dev/tcp redirection
* Fix CVE-2011-1749: Anticipate RLIMIT_FSIZE (Closes: #629420)
* start-statd: Use bash (Closes: #621027)
* Add build-arch and build-indep makefile targets to debian/rules
* Add override for setuid mount.nfs
.
[ Ben Hutchings ]
* statd.man, nfsiostat.man: Fix syntax errors, thanks to Simon Paillard
(Closes: #624261)
* exports.man: Fix syntax errors
* nfs.man: Fix syntax errors and improve tabulation
Checksums-Sha1:
1d6af0538949c4875e1133447c22c3530d359182 1458 nfs-utils_1.2.3-3.dsc
0f0643b2b85f36cc1babb79e56a612a3a02be9ba 39521 nfs-utils_1.2.3-3.debian.tar.bz2
99f6de73681db0eac34a350c51196228c453ae40 162898 nfs-kernel-server_1.2.3-3_i386.deb
bd605beda4308544989298ff16d5ff9b6f24cd14 256248 nfs-common_1.2.3-3_i386.deb
Checksums-Sha256:
88b6160e2dd660a695c366e5f39eca02db03955aa593cc9b8f8644bac5fe4eea 1458 nfs-utils_1.2.3-3.dsc
50e484b29053acbe9800d3c332681b517b0ec3f46a075f4d8178124ed1176868 39521 nfs-utils_1.2.3-3.debian.tar.bz2
3e3c5be7c7c87aa08945db6820034bc11cc557d9cf6270268f0697d8fccfc962 162898 nfs-kernel-server_1.2.3-3_i386.deb
7c5eb07c6c32c5f219c4cce362574d5363e476400c4510311087bc4c2630966e 256248 nfs-common_1.2.3-3_i386.deb
Files:
5dfe4b4bb75456c06fba9574431c33a7 1458 net standard nfs-utils_1.2.3-3.dsc
a4645b5ae988bb25435fd3fe5295f9ad 39521 net standard nfs-utils_1.2.3-3.debian.tar.bz2
69d014f9e2ad432b7fd21cb91c02b6d2 162898 net optional nfs-kernel-server_1.2.3-3_i386.deb
6e0cb2a657e23a8a373379025efea401 256248 net standard nfs-common_1.2.3-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk38Z8cACgkQ5UTeB5t8Mo3/bACfbOj5AvhUhBiVeUg0fq+9hni+
vA0AnjIN19Ojy5ujboPzRZvmqqNCXsI9
=ATde
-----END PGP SIGNATURE-----
--- End Message ---