Devuan bug report logs - #817
openrc: supervise-daemon: enable capabilities support

Package: openrc; Reported by: meow <[email protected]>; merged with #818; dated Mon, 25 Dec 2023 03:34:01 UTC; Maintainer for openrc is (unknown).

---

Message received at [email protected]:

Received: (at 817) by bugs.devuan.org; 25 Dec 2023 08:01:31 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f9:fff1:14::58c6:6475]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 25 Dec 2023 08:01:31 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id iJ6LII42iWXJJQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 25 Dec 2023 08:00:14 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 76BBC721; Mon, 25 Dec 2023 08:00:14 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 2C8F681
	for <[email protected]>; Mon, 25 Dec 2023 08:00:14 +0000 (UTC)
Received: by mx.hindley.org.uk (Postfix, from userid 1000)
	id 92E87CF2; Mon, 25 Dec 2023 08:00:13 +0000 (GMT)
Date: Mon, 25 Dec 2023 08:00:13 +0000
From: Mark Hindley <[email protected]>
To: meow <[email protected]>, [email protected]
Subject: Re: bug#817: openrc: supervise-daemon: enable capabilities support
Message-ID: <ZYk2jWsK36lXw5/[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Debbugs-No-Ack: No Thanks


Control: tags debian

Hi,

Yes, this sounds OK for the few who don't use start-stop-daemon.

Thanks.

Mark

---

Information forwarded to [email protected], [email protected]:
bug#817; Package openrc. Full text available.

---

Merged 817 818 Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Message received at [email protected]:

Received: (at submit) by bugs.devuan.org; 25 Dec 2023 03:33:05 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f9:fff1:14::58c6:6475]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 25 Dec 2023 03:33:05 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id gyj7HbD3iGWDGQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 25 Dec 2023 03:32:00 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 58F07392; Mon, 25 Dec 2023 03:31:59 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2001:4860:4864:20::43; helo=mail-oa1-x43.google.com; [email protected]; receiver=<UNKNOWN> 
Received: from mail-oa1-x43.google.com (mail-oa1-x43.google.com [IPv6:2001:4860:4864:20::43])
	by email.devuan.org (Postfix) with ESMTPS id 6870081
	for <[email protected]>; Mon, 25 Dec 2023 03:31:54 +0000 (UTC)
Received: by mail-oa1-x43.google.com with SMTP id 586e51a60fabf-20389f2780fso2851714fac.2
        for <[email protected]>; Sun, 24 Dec 2023 19:31:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1703475111; x=1704079911; darn=bugs.devuan.org;
        h=content-transfer-encoding:mime-version:message-id:subject:to:from
         :date:from:to:cc:subject:date:message-id:reply-to;
        bh=eutQWerZTxh8iW1YawG/qYTI6HDwznCy9OnRsUFbBWs=;
        b=LzhoYPlMHhXQmou4Ze8VT65hpuKLPOHsSkQ0N1CdEdOC3WTpekgJ9XtX26iz9iwqV4
         yjrCTa1yuocP0nRiAPj9gg0Dy9ll682x2uobJC+J26sZVUVGVNODPHEFTo4c0wtvykQJ
         7Nl/unUagcS7iXS8/NhJnGg+Rw6FGpnxX0e+t92xVUgW4/WaRHW16aFu2WVsOGFB2bbf
         s9ZwdZV4/X83vqZXxSKpD1Xfm9UOm2hlnqPJ1x5lKmxYJ43uOx2mlmUyWuEnc9QM/Su5
         CisdtrgMAAXdZsUtrUbNrkG8MAF5J1gLV/6c1KtSeB/b64hEYHYlS1L7RwOV4SFHF1NE
         ptYQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1703475111; x=1704079911;
        h=content-transfer-encoding:mime-version:message-id:subject:to:from
         :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=eutQWerZTxh8iW1YawG/qYTI6HDwznCy9OnRsUFbBWs=;
        b=EUg94NshtvuXUMXZzcoMFdlcF7EszaK8z+eZ7hloSWusAoTMQzjlUcFf33C9YpzRow
         ZMsQ7H/hzdkjtDizSlWhgVrvG18mlQuuWo4+XuV1BesvCTTu0/Vfs4umIgNecJmvuiRB
         vxBrPWmyjYM8uRX8R8zHp+7cG00Og3mo39kadqgUyjXJc94gLAIG0Qm1zS9hVw/vE7K6
         E/tnrQYb1S2Fij4FSBhUDCEL80Mp2xo7eE08PbPHRouwDvWBSNgaehH8CbCRJAF0Jwr8
         u1ZJDQfiHgPI0ppz8szO0cpfOJ60mGcBbztJ+h6Be/NKGnTddUf15H/3rVOgPNGB2chu
         DGsg==
X-Gm-Message-State: AOJu0Yz1ipznS6xA+OTu4360rwHTJTwhvsPzDIZ/Miyfk0uf6Z9IRESY
	zTd+jrbtHXtAc2VgB23H77uhogT4u8AeiQ==
X-Google-Smtp-Source: AGHT+IGRphYKkP705MPhAFryWflr/FLEr9C2euR/9WMED4zP+hTRUf0AFGT32Lj81UtrjMdR0JpIhQ==
X-Received: by 2002:a05:6871:829:b0:1fb:75c:3fea with SMTP id q41-20020a056871082900b001fb075c3feamr6949329oap.74.1703475111426;
        Sun, 24 Dec 2023 19:31:51 -0800 (PST)
Received: from [127.0.0.1] ([188.113.129.29])
        by smtp.gmail.com with ESMTPSA id mn14-20020a0568700c8e00b001faf0485626sm2088436oab.11.2023.12.24.19.31.49
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Sun, 24 Dec 2023 19:31:50 -0800 (PST)
Date: Mon, 25 Dec 2023 04:29:34 +0000
From: meow <[email protected]>
To: [email protected]
Subject: openrc: supervise-daemon: enable capabilities support
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary=----27AK45AG96NS5EQW1ACCZWNLR449C9
Content-Transfer-Encoding: 7bit

------27AK45AG96NS5EQW1ACCZWNLR449C9
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Subject: supervise-daemon: enable capabilities support
Package: openrc
X-Debbugs-Cc: lorietta2023@gmail=2Ecom
Version: 0=2E45=2E2-2
Severity: normal

Dear Maintainer,
There was already a similar report on Debian's BTS, but this one is differ=
ent=2E
Earlier you (Mark) already realized that enabling support
capabilities is =
the right decision that will have a positive impact on
security=2E then a p=
roblem arose -=20
Debian should supply a version
start-stop-daemon from dpkg to maintain com=
patibility=2E
so, I suggest enabling capabilities support and leaving it only
in supervi=
se-daemon=2E=20
this will not affect compatibility in any way, but will allow
improve secu=
rity and ease of use!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus)
Release:	5
Codename:	daedalus
Architecture: x86_64
Kernel: Linux 6=2E1=2E0-16-amd64 (SMP w/6 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=3Den_US=2EUTF-8, LC_CTYPE=3Den_US=2EUTF-8 (charmap=3DUTF-8), =
LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: OpenRC (via /run/openrc)

Versions of packages openrc depends on:
ii  insserv      1=2E24=2E0-1

ii  libaudit1    1:3=2E0=2E9-1

ii  libc6        2=2E36-9+deb12u3
ii  libeinfo1    0=2E45=2E2-2
ii  libpam0g     1=2E5=2E2-6+deb12u1

ii  librc1       0=2E45=2E2-2
ii  libselinux1  3=2E4-1+b6

openrc recommends no packages=2E

Versions of packages openrc suggests:
pn  policycoreutils  <none>
pn  sysvinit-core    <none>

-- Configuration Files:
/etc/init=2Ed/agetty [Errno 13] Permission denied: '/etc/init=2Ed/agetty'

/etc/init=2Ed/cgroups [Errno 13] Permission denied: '/etc/init=2Ed/cgroup=
s'
/etc/init=2Ed/rc [Errno 13] Permission denied: '/etc/init=2Ed/rc'
/etc/init=2Ed/rcS [Errno 13] Permission denied: '/etc/init=2Ed/rcS'
/etc/init=2Ed/savecache [Errno 13] Permission denied: '/etc/init=2Ed/savec=
ache'
/etc/rc=2Econf changed [not included]

-- no debconf information

-- debsums errors found:
debsums: changed file /lib/rc/sh/supervise-daemon=2Esh (from openrc packag=
e)
debsums: changed file /sbin/supervise-daemon (from openrc package)
------27AK45AG96NS5EQW1ACCZWNLR449C9
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html><html><body><div dir=3D"auto">Subject: supervise-daemon: ena=
ble capabilities support<br>Package: openrc<br>X-Debbugs-Cc: lorietta2023@g=
mail=2Ecom<br>Version: 0=2E45=2E2-2<br>Severity: normal<br><br>Dear Maintai=
ner,<br>There was already a similar report on Debian's BTS, but this one is=
 different=2E<br>Earlier you (Mark) already realized that enabling supportc=
apabilities is the right decision that will have a positive impact onsecuri=
ty=2E then a problem arose - <br>Debian should supply a versionstart-stop-d=
aemon from dpkg to maintain compatibility=2E<br>so, I suggest enabling capa=
bilities support and leaving it onlyin supervise-daemon=2E <br>this will no=
t affect compatibility in any way, but will allowimprove security and ease =
of use!<br><br>-- System Information:<br>Distributor ID:	Devuan<br>Descript=
ion:	Devuan GNU/Linux 5 (daedalus)<br>Release:	5<br>Codename:	daedalusArchi=
tecture: x86_64<br>Kernel: Linux 6=2E1=2E0-16-amd64 (SMP w/6 CPU threads; P=
REEMPT)<br>Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE<br>Locale: LANG=
=3Den_US=2EUTF-8, LC_CTYPE=3Den_US=2EUTF-8 (charmap=3DUTF-8), LANGUAGE not =
set<br>Shell: /bin/sh linked to /bin/dash<br>Init: OpenRC (via /run/openrc)=
<br><br>Versions of packages openrc depends on:<br>ii=C2=A0 insserv=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0 1=2E24=2E0-1<br>ii=C2=A0 libaudit1=C2=A0=C2=A0=C2=
=A0 1:3=2E0=2E9-1<br>ii=C2=A0 libc6=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0 2=2E36-9+deb12u3<br>ii=C2=A0 libeinfo1=C2=A0=C2=A0=C2=A0 0=2E45=2E2-2<b=
r>ii=C2=A0 libpam0g=C2=A0=C2=A0=C2=A0=C2=A0 1=2E5=2E2-6+deb12u1<br>ii=C2=A0=
 librc1=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=2E45=2E2-2<br>ii=C2=A0 libsel=
inux1=C2=A0 3=2E4-1+b6<br><br>openrc recommends no packages=2E<br><br>Versi=
ons of packages openrc suggests:<br>pn=C2=A0 policycoreutils=C2=A0 &lt;none=
&gt;<br>pn=C2=A0 sysvinit-core=C2=A0=C2=A0=C2=A0 &lt;none&gt;<br><br>-- Con=
figuration Files:<br>/etc/init=2Ed/agetty [Errno 13] Permission denied: '/e=
tc/init=2Ed/agetty'<br>/etc/init=2Ed/cgroups [Errno 13] Permission denied: =
'/etc/init=2Ed/cgroups'<br>/etc/init=2Ed/rc [Errno 13] Permission denied: '=
/etc/init=2Ed/rc'<br>/etc/init=2Ed/rcS [Errno 13] Permission denied: '/etc/=
init=2Ed/rcS'<br>/etc/init=2Ed/savecache [Errno 13] Permission denied: '/et=
c/init=2Ed/savecache'<br>/etc/rc=2Econf changed [not included]<br><br>-- no=
 debconf information<br><br>-- debsums errors found:<br>debsums: changed fi=
le /lib/rc/sh/supervise-daemon=2Esh (from openrc package)<br>debsums: chang=
ed file /sbin/supervise-daemon (from openrc package)</div></body></html>
------27AK45AG96NS5EQW1ACCZWNLR449C9--

---

Acknowledgement sent to meow <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected], [email protected]. Full text available.

---

Report forwarded to [email protected], [email protected], [email protected]:
bug#817; Package openrc. Full text available.

---