--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: notify user about services to be restarted (checkrestart-like)
- From: Thijs Kinkhorst <thijs@debian.org>
- Date: Wed, 16 Apr 2014 11:58:46 +0200
- Message-id: <20140416095846.32480.41918.reportbug@incagijs.uvt.nl>
Package: apt
Severity: wishlist
Hi,
When library packages are upgraded, services using those libraries need
to be restarted for the change to take effect. A default Debian installation
does nothing to inform the user about that. Some packages have implemented
their own service restarting check in postinst, all done differently and
as in the case of OpenSSL based on an ever incomplete list. The recent
security issue in the latter has again proven the importance of such
functionality.
checkrestart exists to handle this case, but it's not installed by default,
nor is it run automatically when it is.
It makes sense to me that such a task is handled by a high level package
manager. Having such functionality in the package manager would definitely
improve the security of a Debian system.
Is this something you'd consider?
Cheers,
Thijs
--- End Message ---
--- Begin Message ---
- To: David Kalnischkies <david@kalnischkies.de>, 744923-done@bugs.debian.org
- Cc: Thijs Kinkhorst <thijs@debian.org>
- Subject: Re: Bug#744923: notify user about services to be restarted (checkrestart-like)
- From: Julian Andres Klode <jak@debian.org>
- Date: Tue, 18 Aug 2015 14:15:04 +0200
- Message-id: <20150818141344.GA10180@debian.org>
- In-reply-to: <20140418134755.GC2415@crossbow>
- References: <20140416095846.32480.41918.reportbug@incagijs.uvt.nl> <20140418134755.GC2415@crossbow>
On Fri, Apr 18, 2014 at 03:47:55PM +0200, David Kalnischkies wrote:
> On Wed, Apr 16, 2014 at 11:58:46AM +0200, Thijs Kinkhorst wrote:
> > checkrestart exists to handle this case, but it's not installed by default,
> > nor is it run automatically when it is.
> >
> > It makes sense to me that such a task is handled by a high level package
> > manager. Having such functionality in the package manager would definitely
> > improve the security of a Debian system.
> >
> > Is this something you'd consider?
>
> APT provides the facility to run scripts/programs before as well as
> after all actions are taken. This is how e.g. apt-list{changes,bugs} &
> debconf (the do before) and how-can-i-help (done after) work.
>
> I think checkrestart (or a similar thing) should plug itself into apt in
> the same way instead of apt 'hardcoding' something here as this would
> impose additional restrictions like implementation language as you don't
> necessarily want to bring python by default into every 'minbase' chroot
> for example.
>
>
Thant's true, and I'm therefore closing the bug, as keeping it open
just clutters the bug list.
--
Julian Andres Klode - Debian Developer, Ubuntu Member
See http://wiki.debian.org/JulianAndresKlode and http://jak-linux.org/.
Be friendly, do not top-post, and follow RFC 1855 "Netiquette".
- If you don't I might ignore you.
--- End Message ---