[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1002527: marked as done (milter-greylist -u user does not correctly ensure user can update greylist.db)



Your message dated Sat, 28 Oct 2023 10:51:13 +0000
with message-id <E1qwguP-00GToM-8N@fasolo.debian.org>
and subject line Bug#1002527: fixed in milter-greylist 4.6.4-3
has caused the Debian Bug report #1002527,
regarding milter-greylist -u user does not correctly ensure user can update greylist.db
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1002527: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002527
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: milter-greylist
Version: 4.6.4-1
Severity: critical

With an existing installation of milter-greylist set up to work with
chrooted postfix (i.e. USER="postfix" in /etc/default/milter-greylist),
every upgrade sets the owner of the directory /var/lib/milter-greylist
to "greylist" regardless of the setting of USER.  This effectively
breaks postfix, as it will no longer deliver mail until the problem is
resolved.

Note that the particular system hosting my mail server is still running
sysvinit, not systemd.  I do not know how milter-greylist configures the
user under systemd, but the postinst has "greylist" hardcoded, so I
suspect that if the sysadmin has configured a different user, this will
break under systemd, as well.

I chose severity critical because it breaks other software, and said
software is possibly the primary reason for the host on which it is
running, and this breakage can affect many users.

...Marvin


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'oldstable-updates'), (500, 'stable'), (500, 'oldstable'), (200, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-2-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages milter-greylist depends on:
ii  adduser              3.118
ii  init-system-helpers  1.61
ii  libbind9-161         1:9.11.19+dfsg-2.1
ii  libc6                2.33-1
ii  libcurl4             7.79.1-2
ii  libgeoip1            1.6.12-8
ii  libmilter1.0.1       8.16.1-2
ii  libopendkim11        2.11.0~beta2-6
ii  libspf2-2            1.2.10-7.1
ii  libssl1.1            1.1.1l-1
ii  lsb-base             11.1.0

Versions of packages milter-greylist recommends:
ii  postfix  3.6.3-1

milter-greylist suggests no packages.

--- End Message ---
--- Begin Message ---
Source: milter-greylist
Source-Version: 4.6.4-3
Done: Amin Bandali <bandali@gnu.org>

We believe that the bug you reported is fixed in the latest version of
milter-greylist, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1002527@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Amin Bandali <bandali@gnu.org> (supplier of updated milter-greylist package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 24 Oct 2023 19:49:53 -0400
Source: milter-greylist
Architecture: source
Version: 4.6.4-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Amin Bandali <bandali@gnu.org>
Closes: 1002527
Changes:
 milter-greylist (4.6.4-3) unstable; urgency=medium
 .
   * QA upload.
   * Set user greylist in the configuration file rather than as a
     command-line option in the service file (which always takes
     precedence) to allow easier customization. (Closes: #1002527)
     - debian/milter-greylist.service
     - debian/patches/greylist.conf
Checksums-Sha1:
 803ed222b33b24e1bbd60470ddbdbc7799189280 2004 milter-greylist_4.6.4-3.dsc
 22f3bb61ac7c623acfc4cabc1405940b5ca673eb 13072 milter-greylist_4.6.4-3.debian.tar.xz
 e2a6140e5f5e93e956b143bde693df7a0d7bfc3c 6887 milter-greylist_4.6.4-3_amd64.buildinfo
Checksums-Sha256:
 7afa4fad4971c334e31882958d9b43f5e7695fe9741bdde93997352d5da76323 2004 milter-greylist_4.6.4-3.dsc
 52485f33757b8770d2a8c1d855c054a33d1e82b666dfc7390be4e5bae63a442b 13072 milter-greylist_4.6.4-3.debian.tar.xz
 c786c318ef1fb908db1845499f36a383c0f6e76addf7c56c36f5dc3cb8912867 6887 milter-greylist_4.6.4-3_amd64.buildinfo
Files:
 5772f251675507cc7f8ec65a051e19a3 2004 mail optional milter-greylist_4.6.4-3.dsc
 8bcc89f25d1fda071b183a6604420553 13072 mail optional milter-greylist_4.6.4-3.debian.tar.xz
 cb3adbcdd357ff433c42bf99898c94a9 6887 mail optional milter-greylist_4.6.4-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Syd3
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: