Your message dated Wed, 17 Jun 2020 18:04:47 +0000 with message-id <E1jlcQZ-000HRe-IE@fasolo.debian.org> and subject line Bug#904067: fixed in ngetty 1.1-7 has caused the Debian Bug report #904067, regarding ngetty: diff for NMU version 1.1-3.1 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 904067: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904067 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: ngetty: diff for NMU version 1.1-3.1
- From: Ben Hutchings <ben@decadent.org.uk>
- Date: Thu, 19 Jul 2018 05:05:00 +0100
- Message-id: <20180719040456.GA1922@decadent.org.uk>
Package: ngetty Version: 1.1-3 Severity: normal Tags: patch Dear maintainer, I've prepared an NMU for ngetty (versioned as 1.1-3.1) and uploaded it. Ben. -- Ben Hutchings We get into the habit of living before acquiring the habit of thinking. - Albert Camusdiff -Nru ngetty-1.1/debian/changelog ngetty-1.1/debian/changelog --- ngetty-1.1/debian/changelog 2012-11-24 07:42:36.000000000 +0000 +++ ngetty-1.1/debian/changelog 2018-07-19 04:19:18.000000000 +0100 @@ -1,3 +1,23 @@ +ngetty (1.1-3.1) unstable; urgency=medium + + * Non-maintainer upload. + * Rebuild using a version of dietlibc that does not use vsyscall + (Closes: #802185) + * Add Built-Using relationship to dietlibc (Closes: #847579) + * sig_action.h: Define _NSIG_WORDS if necessary (Closes: #829550) + * ngetty-helper: Relax permissions check on Conf (Closes: #623264) + * Remove explicit use of quilt, which is not needed in a 3.0 (quilt) + format package + * Move dietlibc from Build-Depends to Build-Depends-Arch, as is not + needed when building the source package + * Use debhelper compat level 10 + - Upstream changelog is only installed as changelog.gz, not also as + CHANGES + * debian/control: Update Standards-Version to 4.1.5 + - Set Rules-Requires-Root: no + + -- Ben Hutchings <ben@decadent.org.uk> Thu, 19 Jul 2018 04:19:18 +0100 + ngetty (1.1-3) unstable; urgency=low * debian/ngetty.lintian-overrides: Remove dot-slash for newer lintian. diff -Nru ngetty-1.1/debian/compat ngetty-1.1/debian/compat --- ngetty-1.1/debian/compat 2011-02-15 08:44:34.000000000 +0000 +++ ngetty-1.1/debian/compat 2018-07-19 03:37:33.000000000 +0100 @@ -1 +1 @@ -7 +10 diff -Nru ngetty-1.1/debian/control ngetty-1.1/debian/control --- ngetty-1.1/debian/control 2011-02-16 02:44:42.000000000 +0000 +++ ngetty-1.1/debian/control 2018-07-19 03:55:35.000000000 +0100 @@ -2,13 +2,16 @@ Section: comm Priority: optional Maintainer: NIIBE Yutaka <gniibe@fsij.org> -Build-Depends: debhelper (>= 7.0.50~), quilt (>= 0.46-7~), dietlibc-dev -Standards-Version: 3.9.1 +Build-Depends: debhelper (>= 10~) +Build-Depends-Arch: dietlibc-dev (>= 0.34~cvs20160209.1) +Rules-Requires-Root: no +Standards-Version: 4.1.5 Homepage: http://riemann.fmi.uni-sofia.bg/ngetty/ Package: ngetty Architecture: any Depends: lsb-base (>= 3.0-6), ${misc:Depends} +Built-Using: ${ngetty:Built-Using} Description: getty replacement - one single daemon for all consoles Ngetty is a daemon that starts login sessions on virtual console terminals, on demand. It is a good replacement for all those getty diff -Nru ngetty-1.1/debian/patches/ngetty-helper-relax-permissions-check-on-conf.patch ngetty-1.1/debian/patches/ngetty-helper-relax-permissions-check-on-conf.patch --- ngetty-1.1/debian/patches/ngetty-helper-relax-permissions-check-on-conf.patch 1970-01-01 01:00:00.000000000 +0100 +++ ngetty-1.1/debian/patches/ngetty-helper-relax-permissions-check-on-conf.patch 2018-07-19 03:10:33.000000000 +0100 @@ -0,0 +1,23 @@ +From: Ben Hutchings <ben@decadent.org.uk> +Date: Thu, 19 Jul 2018 03:03:02 +0100 +Subject: ngetty-helper: Relax permissions check on Conf +Bug-Debian: https://bugs.debian.org/623264 + +ngetty-helper ignores the contents of the configuration file if any +permissions outside 0600 (owner read and writable) are set. But +debhelper sets the permissions to 0644, so it is ignored by default. + +There is nothing secret in the configuration file, so the only +dangerous permission bits are the group and world writable bits. +--- +--- a/ngetty-helper.c ++++ b/ngetty-helper.c +@@ -232,7 +232,7 @@ int main(int argc,char *argv[]) { + /* 40 bytes for Months or Days */ + if (GLOBAL_fstat_READ(fd,st,s, len,64000, 40)) _exit(1); + close(fd); +- if (st.st_uid || st.st_gid || (st.st_mode & 07177)) len = 0; ++ if (st.st_uid || st.st_gid || (st.st_mode & 07022)) len = 0; + s[len]=0; + + GLOBAL_split(aa,s,'\n', len); diff -Nru ngetty-1.1/debian/patches/series ngetty-1.1/debian/patches/series --- ngetty-1.1/debian/patches/series 2011-02-15 08:49:51.000000000 +0000 +++ ngetty-1.1/debian/patches/series 2018-07-19 03:48:12.000000000 +0100 @@ -1,2 +1,4 @@ 01_no_gz_manual_install.diff +sig_action.h-define-_nsig_words-if-necessary.patch +ngetty-helper-relax-permissions-check-on-conf.patch diff -Nru ngetty-1.1/debian/patches/sig_action.h-define-_nsig_words-if-necessary.patch ngetty-1.1/debian/patches/sig_action.h-define-_nsig_words-if-necessary.patch --- ngetty-1.1/debian/patches/sig_action.h-define-_nsig_words-if-necessary.patch 1970-01-01 01:00:00.000000000 +0100 +++ ngetty-1.1/debian/patches/sig_action.h-define-_nsig_words-if-necessary.patch 2018-07-19 03:10:36.000000000 +0100 @@ -0,0 +1,25 @@ +From: Ben Hutchings <ben@decadent.org.uk> +Date: Thu, 19 Jul 2018 02:53:20 +0100 +Subject: sig_action.h: Define _NSIG_WORDS if necessary +Bug-Debian: https://bugs.debian.org/829550 + +_NSIG_WORDS is defined in <asm/signal.h> on Linux, which I assume was +previously included by dietlibc's <signal.h> but no longer is. + +Including <asm/signal.h> here might introduce conflicts, so just +define _NSIG_WORDS here if we're going to use it and it's not already +defined. +--- +--- a/sig_action.h ++++ b/sig_action.h +@@ -10,6 +10,10 @@ extern int system__errno; + + #if defined(__i386__) || defined(__x86_64__) + ++#ifndef _NSIG_WORDS ++#define _NSIG_WORDS (_NSIG / (8 * sizeof(unsigned long))) ++#endif ++ + #define sigemptyset(set) \ + do { \ + set->sig[0]=0; \ diff -Nru ngetty-1.1/debian/rules ngetty-1.1/debian/rules --- ngetty-1.1/debian/rules 2012-11-24 07:16:14.000000000 +0000 +++ ngetty-1.1/debian/rules 2018-07-19 03:16:00.000000000 +0100 @@ -5,7 +5,11 @@ export DH_OPTIONS %: - dh $@ --with quilt + dh $@ override_dh_auto_build: $(MAKE) CC='diet -Os gcc -W' + +override_dh_gencontrol: + echo >> debian/ngetty.substvars "ngetty:Built-Using=$$(dpkg-query -W -f '$${source:Package} (= $${source:Version})' dietlibc-dev)" + dh_gencontrolAttachment: signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
- To: 904067-close@bugs.debian.org
- Subject: Bug#904067: fixed in ngetty 1.1-7
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Wed, 17 Jun 2020 18:04:47 +0000
- Message-id: <E1jlcQZ-000HRe-IE@fasolo.debian.org>
- Reply-to: Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com>
Source: ngetty Source-Version: 1.1-7 Done: Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> We believe that the bug you reported is fixed in the latest version of ngetty, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 904067@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> (supplier of updated ngetty package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2020 06:42:25 -0300 Source: ngetty Architecture: source Version: 1.1-7 Distribution: unstable Urgency: medium Maintainer: Debian QA Group <packages@qa.debian.org> Changed-By: Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> Closes: 904067 Changes: ngetty (1.1-7) unstable; urgency=medium . * QA upload. (Closes: #904067) * debian/control: - Added ${shlibs:Depends} variable to Depends field. - Added VCS fields. * debian/dirs: useless. Removed. * debian/docs: removed CHANGES because dh_installchangelogs already detect it. * debian/patches/: - Added a numeric prefix to all patches. - Added patch 50_fix-gcc-hardening.patch to enable the GCC hardening. * debian/rules: - Added DEB_BUILD_MAINT_OPTIONS to improve the GCC hardening. - Removed no longer needed variable DH_OPTIONS. * debian/salsa-ci.yml: added to provide CI tests for Salsa. Checksums-Sha1: 4b8f831904f6c567fc93daefe5e92bfbb93ca912 1856 ngetty_1.1-7.dsc 6d502aac98370063db00f879d2845ec59732e041 7396 ngetty_1.1-7.debian.tar.xz 688c7b6ea5d4b8bced635ecd740c0a4b8115afd4 5238 ngetty_1.1-7_source.buildinfo Checksums-Sha256: 61305d379dd1e97df805ffb0690a31c404d1c890fa6e360f611f59c8cf0314e7 1856 ngetty_1.1-7.dsc 69078a8e283bd2a1bb06191eba78c5c920d13ad9f50f57377cc79e4169882414 7396 ngetty_1.1-7.debian.tar.xz 70ed91f77df4e4c46b46dff9244959304b35c92c155eaa48a9cbbda439428c33 5238 ngetty_1.1-7_source.buildinfo Files: 285d85210477aaf265e1cfef4306a0aa 1856 comm optional ngetty_1.1-7.dsc 179910153cc29ec99d1c7d5837014dc0 7396 comm optional ngetty_1.1-7.debian.tar.xz 5910be9d71bee677b698b28a382ccbd2 5238 comm optional ngetty_1.1-7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENX3LDuyVoBrrofDS3mO5xwTr6e8FAl7qVWEACgkQ3mO5xwTr 6e8Rzw/9EZwJEImUzn0+N1P2cJav/D9piiEBG9N3b+yp6y2zxgzGgoZRxKo5yAny zzozfh71vBK/aNpF5R/XhMUqtNlYY3LrC8s92J+bEn73EphOm+zabNtJHzU1VBqo TZkTcGoOPV0H01kujVZh78I9EP4CIELBHTqm7gtYT9z2IIPDp69X/yu5Q097RaWE FdckTfgEEPdvekQHLTEqJVl3xwetevdbGFAcgSbBbYZ9lwdzceyWtkuesDVfNs/i 2L+ACEawkID76LKpXCMu6Gb6TI8dm3Hk+vszWvooKaGk/sAzWxG8XlnKmh3MmJ+b LS+WkV47X5XYbDuEopv7sv3MVDtXz0FnoCWddbtfG2ytFG2hK657dUBKuDQ11PU5 qAvOoodRfd4GOxeJcJ14aD2HvTEgr3/wzPVNIUyIET1jj0GYcgyR0azfNIOX5Hj8 9KT5tvukw0t5owlBmPoaKHX+TFTlr4Dso9qZxEW//v5bLSOYLGTqzFLtojwL/jSP ns1YmmYOHzGwR4kn+Do8h1sJucH+rbm3OdEaec6XpX8gRbiQ1om+utFULuRhySqX rKuB+/0VVs5NMTo6PCKz+G+o9+TuvEucso8auVGfhecKg0I+dM2JpReeQb4NQBu1 g4hk7NGTTqTLVQCSegduf1qG9qHZKIpWFD136IgJlY26Y9+9z+k= =5qv9 -----END PGP SIGNATURE-----
--- End Message ---