[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#823548: marked as done (ITP: bubblewrap -- setuid wrapper for unprivileged chroot and namespace manipulation)

Your message dated Tue, 17 May 2016 14:00:29 +0000
with message-id <E1b2fXx-0002y3-MV@franck.debian.org>
and subject line Bug#823548: fixed in bubblewrap 0~git160513-1
has caused the Debian Bug report #823548,
regarding ITP: bubblewrap -- setuid wrapper for unprivileged chroot and namespace manipulation
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
823548: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823548
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
Owner: Simon McVittie <smcv@debian.org>
Control: affects -1 xdg-app

* Package name    : bubblewrap
  Version         : (no releases yet)
  Upstream Author : Colin Walters, Alex Larsson
* URL             : https://github.com/projectatomic/bubblewrap/
* License         : LGPL-2+
  Programming Lang: C
  Description     : setuid wrapper for unprivileged chroot and namespace manipulation

bubblewrap is a setuid wrapper tool with which unprivileged users can
launch containers, using chroot and various Linux namespace features,
without giving those users access to the full attack surface of user
namespaces.

---

bubblewrap is derived from xdg-app-helper in src:xdg-app, which is itself
derived from linux-user-chroot. The next upstream version of
xdg-app will replace xdg-app-helper with a private copy of bubblewrap as a
git submodule; later versions are intended to use a system copy of
bubblewrap, at least optionally.

When bubblewrap has matured a bit and had some releases, it might make
sense to treat it as superseding linux-user-chroot, possibly with a
transitional package containing a script for command-line compatibility,
so that the overall number of setuid-root things in the archive can
reduce. (linux-user-chroot maintainer in X-Debbugs-Cc)

I intend to maintain this in collab-maint, with pkg-utopia as
the primary maintainer (unless some other team wants it). Co-maintainers
and security audits welcome.

    S

--- End Message ---
--- Begin Message --- 
Source: bubblewrap
Source-Version: 0~git160513-1

We believe that the bug you reported is fixed in the latest version of
bubblewrap, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 823548@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated bubblewrap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 10 May 2016 08:45:59 +0000
Source: bubblewrap
Binary: bubblewrap
Architecture: source amd64
Version: 0~git160513-1
Distribution: unstable
Urgency: low
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 bubblewrap - setuid wrapper for unprivileged chroot and namespace manipulation
Closes: 823548
Changes:
 bubblewrap (0~git160513-1) unstable; urgency=low
 .
   * Initial upload (closes: #823548).
Checksums-Sha1:
 709a0d6ef86c9d726120820cea42c320e0b18e8f 1869 bubblewrap_0~git160513-1.dsc
 019212bc13efe61236d4e767a21af41d3d15db0f 78840 bubblewrap_0~git160513.orig.tar.xz
 2e68927283181a38bb19f2002ae9a1be89804115 1672 bubblewrap_0~git160513-1.debian.tar.xz
 cf1d3d6869bf9e4c4ff8dadaff75fe8f64016e6b 43388 bubblewrap-dbgsym_0~git160513-1_amd64.deb
 f64c49119a9457bed49b4a5fc7ef0728d6e07c98 22792 bubblewrap_0~git160513-1_amd64.deb
Checksums-Sha256:
 33cf5d09ba1578acb550f0acfaba00dccbd3abc7387d3bb45a6578d109730db9 1869 bubblewrap_0~git160513-1.dsc
 b0d4c01b1fa4698f311241b7841c7edd3531ad79cac02205219bf1112f2cb888 78840 bubblewrap_0~git160513.orig.tar.xz
 80c2ba53651ba9256552a2d9a7ab652c767e26cf8de43afb70603bb2233e47c6 1672 bubblewrap_0~git160513-1.debian.tar.xz
 2394c55d969e478563ffbbd53ed05006947341fc48b669bfc5849d6492a666e8 43388 bubblewrap-dbgsym_0~git160513-1_amd64.deb
 788d109a4c526bb92b415117037df306685f1f204fb097aab7e2a601c61a9481 22792 bubblewrap_0~git160513-1_amd64.deb
Files:
 3adb39f39852bdfc84fdcf8b9cbac467 1869 web extra bubblewrap_0~git160513-1.dsc
 0c9c23518467327ee5bcfcdd7d1fabec 78840 web extra bubblewrap_0~git160513.orig.tar.xz
 05f3cd98bb2a8e23a8ee3f42edbda772 1672 web extra bubblewrap_0~git160513-1.debian.tar.xz
 f926c01eb08af5ac3a5d86428d4801e0 43388 debug extra bubblewrap-dbgsym_0~git160513-1_amd64.deb
 5b30112774512e95161730cc4015dc59 22792 web extra bubblewrap_0~git160513-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=D8t4
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: