[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#287118: marked as done (rsh-client: should work even if not SETUID)

Your message dated Wed, 31 Jan 2024 18:38:44 +0000
with message-id <[🔎] E1rVFTw-00GtFr-JD@fasolo.debian.org>
and subject line Bug#1041864: Removed package(s) from unstable
has caused the Debian Bug report #287118,
regarding rsh-client: should work even if not SETUID
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
287118: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287118
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: rsh-client
Version: 0.17-13
Severity: normal

The rsh client tries to bind to a port below 1024.  If it gets EACCESS
(Permission denied) then it aborts.  If you want to run it as non-root (IE
chmod the program to mode 0755 for security reasons) then it will not operate.

For correct operation it should skip the functionality of binding to a low
port if it discovers that it does not have appropriate privs.  But it should
not expect that it can bind to low ports if getuid() returns 0, systems such
as SE Linux may deny it such access even when it is run as root.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-se
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages rsh-client depends on:
ii  libc6                       2.3.2.ds1-19 GNU C Library: Shared libraries an

-- no debconf information

--- End Message ---
--- Begin Message --- 
Version: 0.17-24+rm

Dear submitter,

as the package netkit-rsh has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1041864

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)

--- End Message ---
Reply to: