Devuan bug report logs - #653
start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure

Package: puppet-master; Reported by: Joril <[email protected]>; Keywords: debian; Done: Mark Hindley <[email protected]>; Maintainer for puppet-master is (unknown).

---

Message received at [email protected]:

Received: (at 653-done) by bugs.devuan.org; 10 Jan 2023 17:07:33 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2001:41d0:2:d06e::5c4:2612]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 10 Jan 2023 17:07:33 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id HUkyFiabvWNUKwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Tue, 10 Jan 2023 17:06:46 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 486F4DB6; Tue, 10 Jan 2023 17:06:46 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id E6628B69
	for <[email protected]>; Tue, 10 Jan 2023 17:06:45 +0000 (UTC)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1pFI5F-00036j-2c
	for [email protected]; Tue, 10 Jan 2023 17:06:45 +0000
Received: (nullmailer pid 27317 invoked by uid 1000);
	Tue, 10 Jan 2023 17:06:44 -0000
Date: Tue, 10 Jan 2023 17:06:44 +0000
From: Mark Hindley <[email protected]>
To: [email protected]
Subject: Removed in Debian, closing.
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Debbugs-No-Ack: No Thanks

See https://bugs.debian.org/1021202

---

Notification sent to Joril <[email protected]>:
bug acknowledged by developer. Full text available.

---

Reply sent to Mark Hindley <[email protected]>:
You have taken responsibility. Full text available.

---

Set bug forwarded-to-address to 'https://bugs.debian.org/1003867'. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Added tag(s) debian. Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Message received at [email protected]:

Received: (at 653) by bugs.devuan.org; 15 Jan 2022 10:00:02 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Sat, 15 Jan 2022 10:00:02 +0000 (UTC)
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 07BAF66135B
	for <[email protected]>; Sat, 15 Jan 2022 10:59:15 +0100 (CET)
Received: from apollo.hindleynet ([192.168.1.3] helo=hindley.org.uk)
	by mx.hindley.org.uk with smtp (Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1n8fq4-0006fy-Hj; Sat, 15 Jan 2022 09:59:12 +0000
Received: (nullmailer pid 32156 invoked by uid 1000);
	Sat, 15 Jan 2022 09:59:11 -0000
Date: Sat, 15 Jan 2022 09:59:11 +0000
From: Mark Hindley <[email protected]>
To: Joril <[email protected]>, [email protected]
Subject: Re: bug#653: start-stop-daemon: matching only on non-root pidfile
 /run/puppet/master.pid is insecure
Message-ID: <YeKa77XpW6uRqbt/@hindley.org.uk>
References: <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local>
X-Debbugs-No-Ack: No Thanks
X-Spam-Status: No, score=0.4 required=5.0 tests=RCVD_IN_DNSWL_BLOCKED,
	RDNS_DYNAMIC,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Control: tags -1 debian

Joril,

Thanks for this.

On Sat, Jan 15, 2022 at 09:55:08AM +0100, Joril wrote:
> Package: puppet-master
> Version: 5.5.10-4
> Severity: normal

Puppet-master is not a forked package in Devuan and we use Debian's packages
directly without recompilation. Please would you report this issue to Debian's
BTS.

Thanks.

Mark

---

Information forwarded to [email protected], [email protected]:
bug#653; Package puppet-master. Full text available.

---

Message received at [email protected]:

Received: (at submit) by bugs.devuan.org; 15 Jan 2022 08:55:41 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Sat, 15 Jan 2022 08:55:41 +0000 (UTC)
Received: from smtpauth.panizzolo.it (smtpauth.panizzolo.it [78.47.72.61])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id D8D8D661360
	for <[email protected]>; Sat, 15 Jan 2022 09:55:01 +0100 (CET)
Received: from atools.panizzolo.local (unknown [217.194.188.145])
	by smtpauth.panizzolo.it (Postfix) with ESMTP id F0C931203C2;
	Sat, 15 Jan 2022 09:55:00 +0100 (CET)
Received: by atools.panizzolo.local (Postfix, from userid 1000)
	id A055F555; Sat, 15 Jan 2022 09:55:08 +0100 (CET)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Joril <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: start-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure
Message-ID: <164223690854.6170.5422121946210487709.reportbug@atools.panizzolo.local>
Date: Sat, 15 Jan 2022 09:55:08 +0100
X-Spam-Status: No, score=3.2 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,
	FORGED_GMAIL_RCVD,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED,
	RCVD_IN_DNSWL_BLOCKED,SPF_SOFTFAIL autolearn=disabled version=3.4.2
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org

Package: puppet-master
Version: 5.5.10-4
Severity: normal

Dear Maintainer,

Trying to stop puppet-master on Beowulf results in this error:

# service puppet-master stop
[....] Stopping puppet masterstart-stop-daemon: matching only on non-root pidfile /run/puppet/master.pid is insecure
 failed!

Thanks for your time!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 3 (beowulf)
Release:	3
Codename:	beowulf
Architecture: x86_64

Kernel: Linux 4.19.0-18-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages puppet-master depends on:
ii  lsb-base  10.2019051400
ii  puppet    5.5.10-4
ii  ruby      1:2.5.1

puppet-master recommends no packages.

puppet-master suggests no packages.

-- no debconf information

---

Acknowledgement sent to Joril <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected]. Full text available.

---

Report forwarded to [email protected], [email protected]:
bug#653; Package puppet-master. Full text available.

---