X-Loop: [email protected] Subject: bug#321: apparmor: Add /etc/mdns.allow to abstractions/mdns Reply-To: Luigi Bai <[email protected]>, [email protected] Resent-From: Luigi Bai <[email protected]> Resent-To: [email protected] Resent-CC: [email protected] Resent-Date: Sat, 27 Apr 2019 15:18:01 UTC Resent-Message-ID: <[email protected]> Resent-Sender: [email protected] X-Devuan-PR-Message: report 321 X-Devuan-PR-Package: apparmor X-Devuan-PR-Keywords: Received: via spool by [email protected] id=B.15563778025585 (code B ref -1); Sat, 27 Apr 2019 15:18:01 UTC Received: (at submit) by bugs.devuan.org; 27 Apr 2019 15:10:02 +0000 Delivered-To: [email protected] Received: from tupac3.dyne.org [195.169.149.119] by fulcanelli with IMAP (fetchmail-6.3.26) for <debbugs@localhost> (single-drop); Sat, 27 Apr 2019 17:10:02 +0200 (CEST) Received: from gil.mayfirst.org (gil.mayfirst.org [216.66.23.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 31D3CF60972 for <[email protected]>; Sat, 27 Apr 2019 17:04:44 +0200 (CEST) Received: from gil.mayfirst.org (unknown [127.0.0.1]) by gil.mayfirst.org (Postfix) with ESMTP id 305DC5E96; Sat, 27 Apr 2019 11:04:42 -0400 (EDT) Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: xxxxx) with ESMTPSA id 016A15E82 Received: by debian.local (Postfix, from userid 1000) id AE1488040; Sat, 27 Apr 2019 10:04:39 -0500 (CDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Luigi Bai <[email protected]> To: Devuan Bug Tracking System <[email protected]> Message-ID: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Mailer: reportbug 7.5.1+devuan1 Date: Sat, 27 Apr 2019 10:04:39 -0500 X-Virus-Scanned: ClamAV using ClamSMTP X-Spam-Status: No, score=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS, UNPARSEABLE_RELAY autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org Package: apparmor Version: 2.13.2-10 Severity: important Dear Maintainer, * What led up to the situation? Executables protected by apparmor cannot reach MDNS suffixes declared in /etc/mdns.allow, and probed by libnss-mdns. Please see /usr/share/doc/libnss-mdns/README.md.gz in package libnss-mdns. * What exactly did you do (or not do) that was effective (or ineffective)? Attempt to use, e.g., ntpd to connect to an MNDS domain that isn't .local. * What was the outcome of this action? Failure, and a DENIED entry in the kernel to /etc/mdns.allow * What outcome did you expect instead? access to the host on the non-.local MDNS domain. Proposed fix: add /etc/mnds.allow to abstractions/mnds. This fix works for me. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux beowulf/ceres Release: 10 Codename: n/a Architecture: x86_64 Kernel: Linux 4.19.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.71 ii libc6 2.28-8 ii lsb-base 10.2019031300 ii python3 3.7.2-1 apparmor recommends no packages. Versions of packages apparmor suggests: pn apparmor-profiles-extra <none> ii apparmor-utils 2.13.2-10 -- Configuration Files: /etc/apparmor.d/abstractions/mdns changed [not included] -- debconf information excluded
X-Loop: [email protected] From: [email protected] (Devuan bug Tracking System) To: Luigi Bai <[email protected]> Subject: bug#321: Acknowledgement (apparmor: Add /etc/mdns.allow to abstractions/mdns) Message-ID: <[email protected]> In-Reply-To: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> References: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> Precedence: bulk X-Devuan-PR-Message: ack 321 X-Devuan-PR-Package: apparmor X-Devuan-PR-Keywords: Reply-To: [email protected] Thank you for the problem report you have sent regarding Devuan. This is an automatically generated reply, to let you know your message has been received. It is being forwarded to the developers mailing list for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): [email protected] If you wish to submit further information on your problem, please send it to [email protected] (and *not* to [email protected]). Please do not reply to the address at the top of this message, unless you wish to report a problem with the bug-tracking system. Your message specified a Severity: in the pseudo-header, but the severity value important was not recognised. The default severity normal is being used instead. The recognised values are: critical, grave, normal, minor, wishlist. Devuan Bugs Owner (administrator, Devuan bugs database)
MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) X-Loop: [email protected] From: "Devuan bug Tracking System" <[email protected]> To: Mark Hindley <[email protected]> Subject: bug#321: marked as done (apparmor: Add /etc/mdns.allow to abstractions/mdns) Message-ID: <[email protected]> References: <[email protected]> <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Devuan-PR-Message: closed 321 X-Devuan-PR-Package: apparmor Reply-To: [email protected] Date: Fri, 03 Feb 2023 14:54:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1675436042-28491-0" This is a multi-part message in MIME format... ------------=_1675436042-28491-0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your message dated Fri, 3 Feb 2023 14:52:24 +0000 with message-id <[email protected]> and subject line Re: bug#321: apparmor: Add /etc/mdns.allow to abstractions= /mdns has caused the Devuan bug report #321, regarding apparmor: Add /etc/mdns.allow to abstractions/mdns to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) --=20 321: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D321 Devuan Bug Tracking System Contact [email protected] with problems ------------=_1675436042-28491-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.devuan.org; 27 Apr 2019 15:10:02 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from tupac3.dyne.org [195.169.149.119] by fulcanelli with IMAP (fetchmail-6.3.26) for <debbugs@localhost> (single-drop); Sat, 27 Apr 2019 17:10:02 +0200 (CEST) Received: from gil.mayfirst.org (gil.mayfirst.org [216.66.23.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 31D3CF60972 for <[email protected]>; Sat, 27 Apr 2019 17:04:44 +0200 (CEST) Received: from gil.mayfirst.org (unknown [127.0.0.1]) by gil.mayfirst.org (Postfix) with ESMTP id 305DC5E96; Sat, 27 Apr 2019 11:04:42 -0400 (EDT) Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: xxxxx) with ESMTPSA id 016A15E82 Received: by debian.local (Postfix, from userid 1000) id AE1488040; Sat, 27 Apr 2019 10:04:39 -0500 (CDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Luigi Bai <[email protected]> To: Devuan Bug Tracking System <[email protected]> Subject: apparmor: Add /etc/mdns.allow to abstractions/mdns Message-ID: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Mailer: reportbug 7.5.1+devuan1 Date: Sat, 27 Apr 2019 10:04:39 -0500 X-Virus-Scanned: ClamAV using ClamSMTP X-Spam-Status: No, score=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS, UNPARSEABLE_RELAY autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org Package: apparmor Version: 2.13.2-10 Severity: important Dear Maintainer, * What led up to the situation? Executables protected by apparmor cannot reach MDNS suffixes declared in /etc/mdns.allow, and probed by libnss-mdns. Please see /usr/share/doc/libnss-mdns/README.md.gz in package libnss-mdns. * What exactly did you do (or not do) that was effective (or ineffective)? Attempt to use, e.g., ntpd to connect to an MNDS domain that isn't .local. * What was the outcome of this action? Failure, and a DENIED entry in the kernel to /etc/mdns.allow * What outcome did you expect instead? access to the host on the non-.local MDNS domain. Proposed fix: add /etc/mnds.allow to abstractions/mnds. This fix works for me. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux beowulf/ceres Release: 10 Codename: n/a Architecture: x86_64 Kernel: Linux 4.19.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.71 ii libc6 2.28-8 ii lsb-base 10.2019031300 ii python3 3.7.2-1 apparmor recommends no packages. Versions of packages apparmor suggests: pn apparmor-profiles-extra <none> ii apparmor-utils 2.13.2-10 -- Configuration Files: /etc/apparmor.d/abstractions/mdns changed [not included] -- debconf information excluded ------------=_1675436042-28491-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 321-done) by bugs.devuan.org; 3 Feb 2023 14:52:44 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2001:41d0:2:d06e::5c4:2612] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Fri, 03 Feb 2023 14:52:44 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id 6B/fE6sf3WMGGAAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Fri, 03 Feb 2023 14:52:27 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 40CC8A05; Fri, 3 Feb 2023 14:52:27 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id E0F42597 for <[email protected]>; Fri, 3 Feb 2023 14:52:26 +0000 (UTC) Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk) by mx.hindley.org.uk with smtp (Exim 4.84_2) (envelope-from <[email protected]>) id 1pNxQO-00044Z-V6; Fri, 03 Feb 2023 14:52:25 +0000 Received: (nullmailer pid 20853 invoked by uid 1000); Fri, 03 Feb 2023 14:52:24 -0000 Date: Fri, 3 Feb 2023 14:52:24 +0000 From: Mark Hindley <[email protected]> To: Luigi Bai <[email protected]>, [email protected] Subject: Re: bug#321: apparmor: Add /etc/mdns.allow to abstractions/mdns Message-ID: <[email protected]> References: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Debbugs-No-Ack: No Thanks Version: 3.0.0-1 Fixed in Debian. Closing. Mark ------------=_1675436042-28491-0--
MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) X-Loop: [email protected] From: "Devuan bug Tracking System" <[email protected]> To: Luigi Bai <[email protected]> Subject: bug#321 closed by Mark Hindley <[email protected]> (Re: bug#321: apparmor: Add /etc/mdns.allow to abstractions/mdns) Message-ID: <[email protected]> References: <[email protected]> <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Devuan-PR-Message: they-closed 321 X-Devuan-PR-Package: apparmor Reply-To: [email protected] Date: Fri, 03 Feb 2023 14:54:03 +0000 Content-Type: multipart/mixed; boundary="----------=_1675436043-28491-1" This is a multi-part message in MIME format... ------------=_1675436043-28491-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" This is an automatic notification regarding your bug report which was filed against the apparmor package: #321: apparmor: Add /etc/mdns.allow to abstractions/mdns It has been closed by Mark Hindley <[email protected]>. Their explanation is attached below along with your original report. If this explanation is unsatisfactory and you have not received a better one in a separate message then please contact Mark Hindley <mark@hin= dley.org.uk> by replying to this email. --=20 321: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D321 Devuan Bug Tracking System Contact [email protected] with problems ------------=_1675436043-28491-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 321-done) by bugs.devuan.org; 3 Feb 2023 14:52:44 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2001:41d0:2:d06e::5c4:2612] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Fri, 03 Feb 2023 14:52:44 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id 6B/fE6sf3WMGGAAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Fri, 03 Feb 2023 14:52:27 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 40CC8A05; Fri, 3 Feb 2023 14:52:27 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id E0F42597 for <[email protected]>; Fri, 3 Feb 2023 14:52:26 +0000 (UTC) Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk) by mx.hindley.org.uk with smtp (Exim 4.84_2) (envelope-from <[email protected]>) id 1pNxQO-00044Z-V6; Fri, 03 Feb 2023 14:52:25 +0000 Received: (nullmailer pid 20853 invoked by uid 1000); Fri, 03 Feb 2023 14:52:24 -0000 Date: Fri, 3 Feb 2023 14:52:24 +0000 From: Mark Hindley <[email protected]> To: Luigi Bai <[email protected]>, [email protected] Subject: Re: bug#321: apparmor: Add /etc/mdns.allow to abstractions/mdns Message-ID: <[email protected]> References: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Debbugs-No-Ack: No Thanks Version: 3.0.0-1 Fixed in Debian. Closing. Mark ------------=_1675436043-28491-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.devuan.org; 27 Apr 2019 15:10:02 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from tupac3.dyne.org [195.169.149.119] by fulcanelli with IMAP (fetchmail-6.3.26) for <debbugs@localhost> (single-drop); Sat, 27 Apr 2019 17:10:02 +0200 (CEST) Received: from gil.mayfirst.org (gil.mayfirst.org [216.66.23.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 31D3CF60972 for <[email protected]>; Sat, 27 Apr 2019 17:04:44 +0200 (CEST) Received: from gil.mayfirst.org (unknown [127.0.0.1]) by gil.mayfirst.org (Postfix) with ESMTP id 305DC5E96; Sat, 27 Apr 2019 11:04:42 -0400 (EDT) Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: xxxxx) with ESMTPSA id 016A15E82 Received: by debian.local (Postfix, from userid 1000) id AE1488040; Sat, 27 Apr 2019 10:04:39 -0500 (CDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Luigi Bai <[email protected]> To: Devuan Bug Tracking System <[email protected]> Subject: apparmor: Add /etc/mdns.allow to abstractions/mdns Message-ID: <155637747898.16775.9163846764972860518.reportbug@lpblinvm.vm.kandl.houston.tx.us> X-Mailer: reportbug 7.5.1+devuan1 Date: Sat, 27 Apr 2019 10:04:39 -0500 X-Virus-Scanned: ClamAV using ClamSMTP X-Spam-Status: No, score=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS, UNPARSEABLE_RELAY autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org Package: apparmor Version: 2.13.2-10 Severity: important Dear Maintainer, * What led up to the situation? Executables protected by apparmor cannot reach MDNS suffixes declared in /etc/mdns.allow, and probed by libnss-mdns. Please see /usr/share/doc/libnss-mdns/README.md.gz in package libnss-mdns. * What exactly did you do (or not do) that was effective (or ineffective)? Attempt to use, e.g., ntpd to connect to an MNDS domain that isn't .local. * What was the outcome of this action? Failure, and a DENIED entry in the kernel to /etc/mdns.allow * What outcome did you expect instead? access to the host on the non-.local MDNS domain. Proposed fix: add /etc/mnds.allow to abstractions/mnds. This fix works for me. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux beowulf/ceres Release: 10 Codename: n/a Architecture: x86_64 Kernel: Linux 4.19.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.71 ii libc6 2.28-8 ii lsb-base 10.2019031300 ii python3 3.7.2-1 apparmor recommends no packages. Versions of packages apparmor suggests: pn apparmor-profiles-extra <none> ii apparmor-utils 2.13.2-10 -- Configuration Files: /etc/apparmor.d/abstractions/mdns changed [not included] -- debconf information excluded ------------=_1675436043-28491-1--
Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.
Devuan Bugs Owner <[email protected]>.
Last modified:
Sat, 18 Jan 2025 08:39:01 UTC