Devuan bug report logs - #818
openrc: supervise-daemon: enable capabilities support

Package: openrc; Reported by: meow <[email protected]>; merged with #817; dated Mon, 25 Dec 2023 03:34:03 UTC; Maintainer for openrc is (unknown).

---

Merged 817 818 Request was from Mark Hindley <[email protected]> to [email protected]. Full text available.

---

Message received at [email protected]:

Received: (at submit) by bugs.devuan.org; 25 Dec 2023 03:33:05 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f9:fff1:14::58c6:6475]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 25 Dec 2023 03:33:05 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id aO3SNtL3iGWDGQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 25 Dec 2023 03:32:34 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id D8227392; Mon, 25 Dec 2023 03:32:34 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::242; helo=mail-oi1-x242.google.com; [email protected]; receiver=<UNKNOWN> 
Received: from mail-oi1-x242.google.com (mail-oi1-x242.google.com [IPv6:2607:f8b0:4864:20::242])
	by email.devuan.org (Postfix) with ESMTPS id E4B3781
	for <[email protected]>; Mon, 25 Dec 2023 03:32:30 +0000 (UTC)
Received: by mail-oi1-x242.google.com with SMTP id 5614622812f47-3bb98e61b59so1000992b6e.2
        for <[email protected]>; Sun, 24 Dec 2023 19:32:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1703475148; x=1704079948; darn=bugs.devuan.org;
        h=content-transfer-encoding:mime-version:message-id:subject:to:from
         :date:from:to:cc:subject:date:message-id:reply-to;
        bh=WQhwPApLFngtB1MJw7jBZIFNWRobjPFaRxfPU2XqNZY=;
        b=Fg73nbF+MFqEHS/jOUkp6OHPr2Zur6bbW2pI5fXhjzKoxd3RzdD6tmzq/eU592StBC
         RJwCV6VUwwuzgQLPvLgGP6Qs+nXkANhf0yvDnTJvP48vmaArcCUsQF0KpLhExBwbxInk
         x4ayj0+KEhExqnhLy/aWaJ5Ffcu7CJ7z3h4lYTt3J+LLO2nMmMCJ5wOKyvx7Tl3MvnoI
         1QOmtUQSyhEFb2mQ1C3IFCacJz/sGql6GeAkeH+AX5fPyit3oS4MoyvrycpRddVA96X7
         jp9Mj98CNZY7eYGD0zVScafkSPah8wIt1o4pEXGUyOOGzq8VYY4pcaq9GbK17D545FdJ
         igqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1703475148; x=1704079948;
        h=content-transfer-encoding:mime-version:message-id:subject:to:from
         :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=WQhwPApLFngtB1MJw7jBZIFNWRobjPFaRxfPU2XqNZY=;
        b=WMWpfO61bb7VZ8/1qPQIMtOm1xCcbf8sufR6j9aJP5sJ5jp5gI0Mf/PWXsM8GInUGD
         EXaBxITNx/MKw3/fWgraSDvMErnVXdTJAGk37SQcMnVtkc68E84lJGPjYWx6l5CtDiIc
         tXY+LwGqSJtw7NnvUWkJKmqeY3HKRyB1wAvLGxitXS8TibIjKCeVm6vNX//4mZ9s/VoQ
         XqWfcsA1KPgEWRE/5m85atI3D9XXIaEkYW18LYEzGeSPJzC7XkhtdPz1wIF0QJ/AXYL4
         rZHCUxoZjAreDTOrqmeYl88Rs5d0xa0D2QhyTXaWofAcfBw+BBr+NGG1gEIJq6iZO80l
         pltw==
X-Gm-Message-State: AOJu0Yy8JW0D+sdrIcRGNU1/Tdg/qXM2M5S6y7H/RDwtvF2HRLcV1rm5
	yoODNCKMab36XaZzgUxWbH0vX+rAtstWoQ==
X-Google-Smtp-Source: AGHT+IFbNvH2JyDl/DDrszhHCWWV3YIiFuYceYrIL4ibYrMNigPlfZPP/5ClAk8VFeXK6KVQwoKhQw==
X-Received: by 2002:a05:6808:140f:b0:3bb:5f34:9a6e with SMTP id w15-20020a056808140f00b003bb5f349a6emr3916073oiv.96.1703475147918;
        Sun, 24 Dec 2023 19:32:27 -0800 (PST)
Received: from [127.0.0.1] ([188.113.129.29])
        by smtp.gmail.com with ESMTPSA id m22-20020a05683026d600b006dbee6eedcdsm8559otu.14.2023.12.24.19.32.26
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Sun, 24 Dec 2023 19:32:27 -0800 (PST)
Date: Mon, 25 Dec 2023 04:30:10 +0000
From: meow <[email protected]>
To: [email protected]
Subject: openrc: supervise-daemon: enable capabilities support
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary=----2OP7GMUH7NYGXPMZI9YDDT8PHQ24R6
Content-Transfer-Encoding: 7bit

------2OP7GMUH7NYGXPMZI9YDDT8PHQ24R6
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Package: openrc
X-Debbugs-Cc: lorietta2023@gmail=2Ecom
Version: 0=2E45=2E2-2
Severity: normal

Dear Maintainer,
There was already a similar report on Debian's BTS, but this one is differ=
ent=2E
Earlier you (Mark) already realized that enabling support
capabilities is =
the right decision that will have a positive impact on
security=2E then a p=
roblem arose -=20
Debian should supply a version
start-stop-daemon from dpkg to maintain com=
patibility=2E
so, I suggest enabling capabilities support and leaving it only
in supervi=
se-daemon=2E=20
this will not affect compatibility in any way, but will allow
improve secu=
rity and ease of use!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus)
Release:	5
Codename:	daedalus
Architecture: x86_64
Kernel: Linux 6=2E1=2E0-16-amd64 (SMP w/6 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=3Den_US=2EUTF-8, LC_CTYPE=3Den_US=2EUTF-8 (charmap=3DUTF-8), =
LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: OpenRC (via /run/openrc)

Versions of packages openrc depends on:
ii  insserv      1=2E24=2E0-1

ii  libaudit1    1:3=2E0=2E9-1

ii  libc6        2=2E36-9+deb12u3
ii  libeinfo1    0=2E45=2E2-2
ii  libpam0g     1=2E5=2E2-6+deb12u1

ii  librc1       0=2E45=2E2-2
ii  libselinux1  3=2E4-1+b6

openrc recommends no packages=2E

Versions of packages openrc suggests:
pn  policycoreutils  <none>
pn  sysvinit-core    <none>

-- Configuration Files:
/etc/init=2Ed/agetty [Errno 13] Permission denied: '/etc/init=2Ed/agetty'

/etc/init=2Ed/cgroups [Errno 13] Permission denied: '/etc/init=2Ed/cgroup=
s'
/etc/init=2Ed/rc [Errno 13] Permission denied: '/etc/init=2Ed/rc'
/etc/init=2Ed/rcS [Errno 13] Permission denied: '/etc/init=2Ed/rcS'
/etc/init=2Ed/savecache [Errno 13] Permission denied: '/etc/init=2Ed/savec=
ache'
/etc/rc=2Econf changed [not included]

-- no debconf information

-- debsums errors found:
debsums: changed file /lib/rc/sh/supervise-daemon=2Esh (from openrc packag=
e)
debsums: changed file /sbin/supervise-daemon (from openrc package)
------2OP7GMUH7NYGXPMZI9YDDT8PHQ24R6
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html><html><body><div dir=3D"auto">Package: openrc<br>X-Debbugs-C=
c: lorietta2023@gmail=2Ecom<br>Version: 0=2E45=2E2-2<br>Severity: normal<br=
><br>Dear Maintainer,<br>There was already a similar report on Debian's BTS=
, but this one is different=2E<br>Earlier you (Mark) already realized that =
enabling supportcapabilities is the right decision that will have a positiv=
e impact onsecurity=2E then a problem arose - <br>Debian should supply a ve=
rsionstart-stop-daemon from dpkg to maintain compatibility=2E<br>so, I sugg=
est enabling capabilities support and leaving it onlyin supervise-daemon=2E=
 <br>this will not affect compatibility in any way, but will allowimprove s=
ecurity and ease of use!<br><br>-- System Information:<br>Distributor ID:	D=
evuan<br>Description:	Devuan GNU/Linux 5 (daedalus)<br>Release:	5<br>Codena=
me:	daedalusArchitecture: x86_64<br>Kernel: Linux 6=2E1=2E0-16-amd64 (SMP w=
/6 CPU threads; PREEMPT)<br>Kernel taint flags: TAINT_WARN, TAINT_OOT_MODUL=
E<br>Locale: LANG=3Den_US=2EUTF-8, LC_CTYPE=3Den_US=2EUTF-8 (charmap=3DUTF-=
8), LANGUAGE not set<br>Shell: /bin/sh linked to /bin/dash<br>Init: OpenRC =
(via /run/openrc)<br><br>Versions of packages openrc depends on:<br>ii=C2=
=A0 insserv=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 1=2E24=2E0-1<br>ii=C2=A0 libaudit=
1=C2=A0=C2=A0=C2=A0 1:3=2E0=2E9-1<br>ii=C2=A0 libc6=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 2=2E36-9+deb12u3<br>ii=C2=A0 libeinfo1=C2=A0=C2=A0=C2=A0=
 0=2E45=2E2-2<br>ii=C2=A0 libpam0g=C2=A0=C2=A0=C2=A0=C2=A0 1=2E5=2E2-6+deb1=
2u1<br>ii=C2=A0 librc1=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 0=2E45=2E2-2<br>=
ii=C2=A0 libselinux1=C2=A0 3=2E4-1+b6<br><br>openrc recommends no packages=
=2E<br><br>Versions of packages openrc suggests:<br>pn=C2=A0 policycoreutil=
s=C2=A0 &lt;none&gt;<br>pn=C2=A0 sysvinit-core=C2=A0=C2=A0=C2=A0 &lt;none&g=
t;<br><br>-- Configuration Files:<br>/etc/init=2Ed/agetty [Errno 13] Permis=
sion denied: '/etc/init=2Ed/agetty'<br>/etc/init=2Ed/cgroups [Errno 13] Per=
mission denied: '/etc/init=2Ed/cgroups'<br>/etc/init=2Ed/rc [Errno 13] Perm=
ission denied: '/etc/init=2Ed/rc'<br>/etc/init=2Ed/rcS [Errno 13] Permissio=
n denied: '/etc/init=2Ed/rcS'<br>/etc/init=2Ed/savecache [Errno 13] Permiss=
ion denied: '/etc/init=2Ed/savecache'<br>/etc/rc=2Econf changed [not includ=
ed]<br><br>-- no debconf information<br><br>-- debsums errors found:<br>deb=
sums: changed file /lib/rc/sh/supervise-daemon=2Esh (from openrc package)<b=
r>debsums: changed file /sbin/supervise-daemon (from openrc package)</div><=
/body></html>
------2OP7GMUH7NYGXPMZI9YDDT8PHQ24R6--

---

Acknowledgement sent to meow <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected], [email protected]. Full text available.

---

Report forwarded to [email protected], [email protected], [email protected]:
bug#818; Package openrc. Full text available.

---