Opty <opty77@gmail.com>:Mark Hindley <mark@hindley.org.uk>:Opty <opty77@gmail.com>:Mark Hindley <mark@hindley.org.uk>:Opty <opty77@gmail.com>:Mark Hindley <mark@hindley.org.uk>:Received: (at 881-done) by bugs.devuan.org; 6 Apr 2025 08:37:41 +0000 Return-Path: <mark@hindley.org.uk> Delivered-To: bugs@devuan.org Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Sun, 06 Apr 2025 08:37:41 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id 88v1HD898metawAAmSBk0A (envelope-from <mark@hindley.org.uk>) for <bugs@devuan.org>; Sun, 06 Apr 2025 08:37:19 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 3F43D585; Sun, 6 Apr 2025 08:37:19 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 7001B37 for <881-done@bugs.devuan.org>; Sun, 6 Apr 2025 08:37:17 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 03CF991; Sun, 6 Apr 2025 09:37:16 +0100 (BST) Received: (nullmailer pid 23735 invoked by uid 1000); Sun, 06 Apr 2025 08:37:14 -0000 Date: Sun, 6 Apr 2025 09:37:14 +0100 From: Mark Hindley <mark@hindley.org.uk> To: Opty <opty77@gmail.com> Cc: 881-done@bugs.devuan.org Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint Message-ID: <Z_I9OoxRWQWrCk8F@hindley.org.uk> References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> <Z-1gvG_pT6x0FsRf@hindley.org.uk> <CAERDJOGezboa6AzE9oJt-JKPtqEiE97fJ8DPapPmCxQhjCBTJw@mail.gmail.com> <Z-4u39maG54wqFRF@hindley.org.uk> <CAERDJOG2SLOG-=ouK4QwDc_-d4CQz=Maf1yRO9-1ioBvYhuWBw@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <CAERDJOG2SLOG-=ouK4QwDc_-d4CQz=Maf1yRO9-1ioBvYhuWBw@mail.gmail.com> Opty, Thanks, On Thu, Apr 03, 2025 at 01:16:40PM +0200, Opty wrote: > > That isn't conventional Debian practice. > > I could continue using the policy layer unmodified, selectively allow > what I need (extra work) and keep denied the rest > > -or- > > modify invoke-rc.d or rather policy-rc.d to check > $DPKG_MAINTSCRIPT_NAME (to detect preinst, postinst, prerm or postrm > script), crosscheck $DPKG_MAINTSCRIPT_PACKAGE vs. $INITSCRIPTID > (substring of each other) to allow calling other scripts and > eventually do nothing, maybe ask the administrator. > > Both seem unintentional error- or side-effect-prone. > > I could also just modify invoke-rc.d to skip the querypolicy call in > case of K link. I find it hard to see an actionable bug here. I think invoke-rc.d and policy-rcd-declarative* are behaving as advertised. Your requirements appear different to what policy-rcd-declarative-deny-all provides. So, as Simon suggested, you need to write your own policy script to meet your requirements. Therefore I will close this. If you think I have missed something, please feel free to reopen. Thanks Mark
Opty <opty77@gmail.com>:Mark Hindley <mark@hindley.org.uk>:Received: (at 881) by bugs.devuan.org; 3 Apr 2025 11:18:05 +0000
Return-Path: <opty77@gmail.com>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Thu, 03 Apr 2025 11:18:05 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id XWAKOSZu7mccVgAAmSBk0A
(envelope-from <opty77@gmail.com>)
for <bugs@devuan.org>; Thu, 03 Apr 2025 11:16:54 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id CED43642; Thu, 3 Apr 2025 11:16:54 +0000 (UTC)
Authentication-Results: email.devuan.org;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=k48bm47I;
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::334; helo=mail-ot1-x334.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN>
Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com [IPv6:2607:f8b0:4864:20::334])
by email.devuan.org (Postfix) with ESMTPS id DAECF4B
for <881@bugs.devuan.org>; Thu, 3 Apr 2025 11:16:53 +0000 (UTC)
Received: by mail-ot1-x334.google.com with SMTP id 46e09a7af769-72bff73ce3bso145808a34.1
for <881@bugs.devuan.org>; Thu, 03 Apr 2025 04:16:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743679011; x=1744283811; darn=bugs.devuan.org;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:from:to:cc:subject:date
:message-id:reply-to;
bh=BczYVsGeAusbkwefoira6wmaD/71IYBB/x38h02Xh7I=;
b=k48bm47IPPi+di0p0xcfs0Xz6MSI8kEici7icSMEBYKdx3qu8nVJrdXZnly20cN0Oc
FEQ2/paB/I7fUx/dNajAzS64NjEPBcAcowlA02bp6cBNNTpLhx/tgSmg7CtL/36Q/LSb
agekCEA2QgGrd/eiG/XuV5SVwZ8tG9J5mLSv5IeK5yvMad/Qrq+0fdQe43cPJK/2B/Pj
U3Kvclq2TVGhuSia04ATqa6nhBj8ah45Db0j+e6S+0yNpuvir9TPLHPdilQksf0Db8HI
sRd+6jqbX+xeKDg6W6+zzZro+AFbIAKrG6mVwIrdelBGFNCpx32wymmf/cRx/PBo3OeL
KiIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743679011; x=1744283811;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=BczYVsGeAusbkwefoira6wmaD/71IYBB/x38h02Xh7I=;
b=dcRiJd4ttO8FkSH2SRG8hyxG7ZJs7aLM3AMtXxEcNoBU2vULijC+KnLnbhzsVTFTz6
pNMN+J5g87kypO1ocjxdKZONX03AaEP3CU7hV3tyCuLOqtlsVYJnXHkzJzBTn9wt87gf
BkGozH/NCuQHp6v+j0lroCgoen10iq6D1PeaFrOJH5bCnNRbTdYvcCZZzFFd53rWfgFf
ireVqmTWbSMrATFED3X09yV1GOGg067jQr5MMiIy3P/yLt8YedJTir7KeIOezWBKxcs5
UbltQq8hztdBwPkorFXD8uJHGdwqGnQYK8IdCoWnYZzsHLgwuzYRHFHq/oGSL1x+1Dr4
6yVw==
X-Gm-Message-State: AOJu0Yx0dco5lI7D2CajwjtZM0IuPUqz/ELVjj93X4qX3XTp5I7Dj/Xv
+SPhWfl65NHlaEBFkyx55jlhX7tNXvsgxJYFx1FDBnJrBhux1Lx4V2lxbaVk/AMfoXNvl5AbFsu
VA5Ou2H0Pdu8AelM2W8HjNYYemgs=
X-Gm-Gg: ASbGncuQYsaiI9V8QfBA7/A8j6x7fnt8xcN7LKDGSXxpAyBL7RR08ARDoqGyPsUygyW
aVfH/x7D3DI8jXZpSsC8EFZWY79+vlBSobGc0r/GhzQhWrVAWLa6l/9njYep05XWKBAeAiT6ng/
Xuw31/ZAQpO+a8QllxppuPRxrtvjvacQhFXg==
X-Google-Smtp-Source: AGHT+IECwuNSkh0TQsQRlyS0MwwiOKmhmSreBQEPiEaIefMjVzKMRmEvUQ6ccuTAfzGHsbEHq0tGMnaDEhO68/+ncKM=
X-Received: by 2002:a05:6808:1816:b0:3f6:80e3:f897 with SMTP id
5614622812f47-400295fe4d3mr2012474b6e.1.1743679011360; Thu, 03 Apr 2025
04:16:51 -0700 (PDT)
MIME-Version: 1.0
References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
<Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com>
<Z-1gvG_pT6x0FsRf@hindley.org.uk> <CAERDJOGezboa6AzE9oJt-JKPtqEiE97fJ8DPapPmCxQhjCBTJw@mail.gmail.com>
<Z-4u39maG54wqFRF@hindley.org.uk>
In-Reply-To: <Z-4u39maG54wqFRF@hindley.org.uk>
From: Opty <opty77@gmail.com>
Date: Thu, 3 Apr 2025 13:16:40 +0200
X-Gm-Features: ATxdqUGYn_wSuI1XhNZkBJhaQEvkakGwAn2hACBu8Ye4FNlNX1IcJwIHBeEG8KA
Message-ID: <CAERDJOG2SLOG-=ouK4QwDc_-d4CQz=Maf1yRO9-1ioBvYhuWBw@mail.gmail.com>
Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint
To: Mark Hindley <mark@hindley.org.uk>
Cc: 881@bugs.devuan.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
On Thu, Apr 3, 2025 at 8:46=E2=80=AFAM Mark Hindley <mark@hindley.org.uk> w=
rote:
> On Wed, Apr 02, 2025 at 11:27:15PM +0200, Opty wrote:
> > You may want to upgrade ASAP but restart when convenient (e.g. during
> > low traffic at night) but maybe also a habit from Slackware in my
> > case.
>
> That isn't conventional Debian practice.
I could continue using the policy layer unmodified, selectively allow
what I need (extra work) and keep denied the rest
-or-
modify invoke-rc.d or rather policy-rc.d to check
$DPKG_MAINTSCRIPT_NAME (to detect preinst, postinst, prerm or postrm
script), crosscheck $DPKG_MAINTSCRIPT_PACKAGE vs. $INITSCRIPTID
(substring of each other) to allow calling other scripts and
eventually do nothing, maybe ask the administrator.
Both seem unintentional error- or side-effect-prone.
I could also just modify invoke-rc.d to skip the querypolicy call in
case of K link.
> > > To start or not on install is specified in the package by the maintai=
ner.
> >
> > On our VPS I haven't found any which doesn't start service on package i=
nstall.
>
> It certainly isn't common. But, for example, look at src:netperf: d/rules=
has
>
> override_dh_installinit:
> dh_installinit --no-enable --no-start
>
> and the daemon is not started on install.
Maybe dh_installinit could support conditional start based on
environment variable.
Regards,
Opty
Opty <opty77@gmail.com>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at 881) by bugs.devuan.org; 3 Apr 2025 06:48:10 +0000 Return-Path: <mark@hindley.org.uk> Delivered-To: bugs@devuan.org Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Thu, 03 Apr 2025 06:48:10 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id NA3hGuMu7meHSgAAmSBk0A (envelope-from <mark@hindley.org.uk>) for <bugs@devuan.org>; Thu, 03 Apr 2025 06:46:59 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 3C47D4A8; Thu, 3 Apr 2025 06:46:59 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 5F2993D0 for <881@bugs.devuan.org>; Thu, 3 Apr 2025 06:46:58 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 7E46911D; Thu, 3 Apr 2025 07:46:56 +0100 (BST) Received: (nullmailer pid 17350 invoked by uid 1000); Thu, 03 Apr 2025 06:46:55 -0000 Date: Thu, 3 Apr 2025 07:46:55 +0100 From: Mark Hindley <mark@hindley.org.uk> To: Opty <opty77@gmail.com> Cc: 881@bugs.devuan.org Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint Message-ID: <Z-4u39maG54wqFRF@hindley.org.uk> References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> <Z-1gvG_pT6x0FsRf@hindley.org.uk> <CAERDJOGezboa6AzE9oJt-JKPtqEiE97fJ8DPapPmCxQhjCBTJw@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <CAERDJOGezboa6AzE9oJt-JKPtqEiE97fJ8DPapPmCxQhjCBTJw@mail.gmail.com> On Wed, Apr 02, 2025 at 11:27:15PM +0200, Opty wrote: > You may want to upgrade ASAP but restart when convenient (e.g. during > low traffic at night) but maybe also a habit from Slackware in my > case. That isn't conventional Debian practice. > > To start or not on install is specified in the package by the maintainer. > > On our VPS I haven't found any which doesn't start service on package install. It certainly isn't common. But, for example, look at src:netperf: d/rules has override_dh_installinit: dh_installinit --no-enable --no-start and the daemon is not started on install. Mark
Mark Hindley <mark@hindley.org.uk>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at 881) by bugs.devuan.org; 2 Apr 2025 21:28:37 +0000
Return-Path: <opty77@gmail.com>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 21:28:37 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id q2iLG8Wr7Wf5MgAAmSBk0A
(envelope-from <opty77@gmail.com>)
for <bugs@devuan.org>; Wed, 02 Apr 2025 21:27:33 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id 396EC4A8; Wed, 2 Apr 2025 21:27:33 +0000 (UTC)
Authentication-Results: email.devuan.org;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=g+3tCH2B;
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::232; helo=mail-oi1-x232.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN>
Received: from mail-oi1-x232.google.com (mail-oi1-x232.google.com [IPv6:2607:f8b0:4864:20::232])
by email.devuan.org (Postfix) with ESMTPS id 76C58173
for <881@bugs.devuan.org>; Wed, 2 Apr 2025 21:27:29 +0000 (UTC)
Received: by mail-oi1-x232.google.com with SMTP id 5614622812f47-3fe84963e5fso14246b6e.1
for <881@bugs.devuan.org>; Wed, 02 Apr 2025 14:27:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743629247; x=1744234047; darn=bugs.devuan.org;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:from:to:cc:subject:date
:message-id:reply-to;
bh=heXKYmF909O6Vqy3g9ddSk+qtGNjoT0OTJM8l4ihCa8=;
b=g+3tCH2BVNsy0lwlcRCiFkqKbi5SoxKB44AVgguSDAfqQMlbPpkkAvuiLhNRhe11dN
+TbGnFSzxY/B+eWA8LHNAarzVDSFS2mYUzF7nK1ZBHQBUpbCrre3qah6YxGV/7QG9Tx0
oP6SN+dOJk/Ni50cj0Xf6xVhJ/npE6vIPQEXNuUpoFf5nQnJn3UNpViCf3OIlqaMsFQ2
rnSx8IDIkHVSs2Cs+PxRdUq3yuGRuO8+V4Y3Y56abK6Ce1CyYKQRYkGP0pl48xulE5+o
QBR3iq7W5d44fVWmKSScxpStXjPRrg2QQ4pFIV3KOyHLpE8Sv3XzrfM7y565+492E/Rc
GhfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743629247; x=1744234047;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=heXKYmF909O6Vqy3g9ddSk+qtGNjoT0OTJM8l4ihCa8=;
b=dXUG8qVXk5mbpFA10sOGm/nIWJt2aRV7Q3lw1G/HbrGSvmItCchOhDHrSL9ZII9F60
PmSkeR74hKzP8M6Bf72zExrdUaTgJlMJcb5/LMbWlCfpdSnvvw90iNp1FMS1yWbn4hTC
V+bSZDYNCROiDOQd0GgwcWlVIUb6Qvwzo/+kOSAYqIt2yvkRYKPmx97e0KB+PgY++boO
+q9iQjqpjP4n+WStlBNgzYnc7yYtP0v32mA7frSupIMBnm50uGoP6mDibeF5EaD5SYIe
r8vQ706dnZHgrcVA49wycHJxSOG7n3lSK6EZG9UW7JtHProGHMTZwbTga7em4VKmdXDQ
yj+g==
X-Gm-Message-State: AOJu0Yz6t/3F1KWh7w5mOJzHBmewKVHcV4wU8eIYPiJvDM1Q5bIJnq+S
LJqZmA7rZ1QAnTBVbYMpLGytII/e0LZ5APMMYrPXCOCPzC58jLvir+lUJ3Aosdeo0uG+P7S+7lC
2Br0oedbHQoQqBIn+plrV3G57BL4=
X-Gm-Gg: ASbGncvo0Rb4Yhr0OCL+DEX/3h0bM96S3H58C5yH/Pi85VlW5Bh4+toqXPdGVKc+0w/
5CI91gJxwMkAjh9djKWiB8FCbKijdgC+eclLg4i9p75S/rvAxo437UpC2V2CJYTO0WlThg+bT+W
96Jd7d/7pwuRD30p81lO+vXL+Msg==
X-Google-Smtp-Source: AGHT+IHFMVEza1px7jUBILlj7ci01WA4eTwj5OUj4wE/xHkwTr0tUQlPF4eBeyFW9OxaVafEShW0ZSpDLIDFJ76i5Fs=
X-Received: by 2002:a05:6808:1203:b0:3f6:8233:bc63 with SMTP id
5614622812f47-3ff0f603a07mr4271144b6e.8.1743629247467; Wed, 02 Apr 2025
14:27:27 -0700 (PDT)
MIME-Version: 1.0
References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
<Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com>
<Z-1gvG_pT6x0FsRf@hindley.org.uk>
In-Reply-To: <Z-1gvG_pT6x0FsRf@hindley.org.uk>
From: Opty <opty77@gmail.com>
Date: Wed, 2 Apr 2025 23:27:15 +0200
X-Gm-Features: AQ5f1Jrt566ZlXcWZK1a9q_ykdA4t4KlDQca8Rt5C6oZ3BaOnN99dCdPtkB5FyQ
Message-ID: <CAERDJOGezboa6AzE9oJt-JKPtqEiE97fJ8DPapPmCxQhjCBTJw@mail.gmail.com>
Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint
To: Mark Hindley <mark@hindley.org.uk>
Cc: 881@bugs.devuan.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
On Wed, Apr 2, 2025 at 6:07=E2=80=AFPM Mark Hindley <mark@hindley.org.uk> w=
rote:
> On Wed, Apr 02, 2025 at 01:54:05PM +0200, Opty wrote:
> > Hopefully the whole story so far:
> >
> > I wanted to disable services auto(re)start on package install/upgrade
>
> Why? The usual rationale is to *want* restart on upgrade so that the newl=
y
> installed version is actually running (with any security fixes that might
> bring).
You may want to upgrade ASAP but restart when convenient (e.g. during
low traffic at night) but maybe also a habit from Slackware in my
case.
> To start or not on install is specified in the package by the maintainer.
On our VPS I haven't found any which doesn't start service on package insta=
ll.
Regards,
Opty
Opty <opty77@gmail.com>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.mark <mark@hindley.org.uk>
to control@bugs.devuan.org.
Full text available.mark <mark@hindley.org.uk>
to control@bugs.devuan.org.
Full text available.mark <mark@hindley.org.uk>
to control@bugs.devuan.org.
Full text available.mark <mark@hindley.org.uk>
to control@bugs.devuan.org.
Full text available.Received: (at 881) by bugs.devuan.org; 2 Apr 2025 16:07:32 +0000 Return-Path: <mark@hindley.org.uk> Delivered-To: bugs@devuan.org Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 16:07:32 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id tPZoML9g7WdQJAAAmSBk0A (envelope-from <mark@hindley.org.uk>) for <bugs@devuan.org>; Wed, 02 Apr 2025 16:07:27 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 9A9CD395; Wed, 2 Apr 2025 16:07:27 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id 8DE6581 for <881@bugs.devuan.org>; Wed, 2 Apr 2025 16:07:26 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 24402EF; Wed, 2 Apr 2025 17:07:25 +0100 (BST) Received: (nullmailer pid 1898 invoked by uid 1000); Wed, 02 Apr 2025 16:07:24 -0000 Date: Wed, 2 Apr 2025 17:07:24 +0100 From: Mark Hindley <mark@hindley.org.uk> To: Opty <opty77@gmail.com> Cc: 881@bugs.devuan.org Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint Message-ID: <Z-1gvG_pT6x0FsRf@hindley.org.uk> References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> On Wed, Apr 02, 2025 at 01:54:05PM +0200, Opty wrote: > On Tue, Apr 1, 2025 at 6:23 PM Mark Hindley <mark@hindley.org.uk> wrote: > > Thanks for this. However, I find your report a bit terse. > > > > Do you have policy-rcd-declarative installed? If so what is usage for it? How do > > you have a permissive policy defined? > > Hopefully the whole story so far: > > I wanted to disable services auto(re)start on package install/upgrade Why? The usual rationale is to *want* restart on upgrade so that the newly installed version is actually running (with any security fixes that might bring). To start or not on install is specified in the package by the maintainer. Mark
Mark Hindley <mark@hindley.org.uk>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at 881) by bugs.devuan.org; 2 Apr 2025 13:42:10 +0000
Return-Path: <opty77@gmail.com>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 13:42:10 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id mdG9GaE+7WepGwAAmSBk0A
(envelope-from <opty77@gmail.com>)
for <bugs@devuan.org>; Wed, 02 Apr 2025 13:41:53 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id 4E67F395; Wed, 2 Apr 2025 13:41:53 +0000 (UTC)
Authentication-Results: email.devuan.org;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=CFY6OYI4;
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::231; helo=mail-oi1-x231.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN>
Received: from mail-oi1-x231.google.com (mail-oi1-x231.google.com [IPv6:2607:f8b0:4864:20::231])
by email.devuan.org (Postfix) with ESMTPS id 9FC9181
for <881@bugs.devuan.org>; Wed, 2 Apr 2025 13:41:52 +0000 (UTC)
Received: by mail-oi1-x231.google.com with SMTP id 5614622812f47-3feb1c2ef15so218517b6e.0
for <881@bugs.devuan.org>; Wed, 02 Apr 2025 06:41:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743601311; x=1744206111; darn=bugs.devuan.org;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:from:to:cc:subject:date
:message-id:reply-to;
bh=UiK7jFnTMmLWS7+YGp8so89NqvSoxbnTvVrCXXosqzw=;
b=CFY6OYI4xN0lWxDujf6f/5II9QS4Cyeo/iuN6LX5ua1f0NQpxzF5MrXKvulESmT5rH
AboQzohN7xrHz+Pw4E16Ky/VCJ+bLQCWyuAML6Xn8n/xA3ihXeAwGL9z1ht8BKwO2cvb
pA6esengNmRD/UhWeo+4xhc6j8RMzED28RIkgFfzj2VnrEttgA9oGrej7iQct/IB4rf1
UfXquC1I1b5e5KFgulNAJgxEiTDifUGg1D4h58Cn9lKgL1xql3ukXh3TO+3B0gmtAljv
wMaXzVEpJ4M1Vgn6ST7SSZRTl3vNUHqBvx+FxUTa/ie95gdAGfnyTJanVDhs5SR9AlGO
gjUw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743601311; x=1744206111;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=UiK7jFnTMmLWS7+YGp8so89NqvSoxbnTvVrCXXosqzw=;
b=bFMyBAtr8//xeo526Ivf4PmEnRrrgdh49UZoPE+NNp10poIBH32Df4Ke/Z+dKh706C
Eb0mDIAEtyp6pEOk5j0GgFOEOnuMY9okKhtpZj71UXoKRQYH4XzDRsZ9lBoWfFau1PGc
mJQ93c6YLOxgRArnVbteoh78V/HUuw/WL3yRYg1X9IZu588BX45WLh7Tg/xkzhH/l4p6
gQUzCVW5iBZ+1i7nTiAjaNMnzcIG7GFskfjOkSTW7iM1DIgCEsvHP1iu3+2esQG0JfY4
Yh5s0KdtuLPDsd2wzgVJdzH7LVEmAQNPnF70WW36xXv/TiJzSFoMswIF/iZ5xoPaXf4j
hwSQ==
X-Gm-Message-State: AOJu0YxO71QVUZbTCGr9oxGrH7DT2sv+qnXgOH6oGLDcW8LQJ0yGCUYO
SBGWZi/7uR6ZyrO+HgQrd0YUEpjXZDdo8migYhQPbaGz0X27toa6eDoz49Qj7P2ZPGUpX4O++EH
yfye8hOOdvvJJR138inQ4H/OwXSw=
X-Gm-Gg: ASbGncvLQkfAKoxo5Ybbln5qN9ZYnwNSr+b7WhxqOhHEafBbXc08dg3xebnlcDZ//Ny
dNRwuEHwwXV2AB+tPCea/9zHnmZok19wnNEM+rhjKgcx3Wr6ifjy4vowbYaqJ4xDasKzRVnA0Kh
izqLKEpm5RfNwSPQ4mDLkQwDSLmczBD19yjA==
X-Google-Smtp-Source: AGHT+IFjFppK5mMVec6pweYlqjMjrGoe5oxbGqCHOgk8XpL1Q+TnUClH334L4k6otH8OvVXh1Ds3CyOKs/4/BAtLG5E=
X-Received: by 2002:a05:6808:13d3:b0:3f4:17fa:8b25 with SMTP id
5614622812f47-3ff0f5b66d4mr3503540b6e.5.1743601311164; Wed, 02 Apr 2025
06:41:51 -0700 (PDT)
MIME-Version: 1.0
References: <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
<CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> <20250402143026.50db21f7@lorenz.fritz.box>
In-Reply-To: <20250402143026.50db21f7@lorenz.fritz.box>
From: Opty <opty77@gmail.com>
Date: Wed, 2 Apr 2025 15:41:39 +0200
X-Gm-Features: AQ5f1JoA5h6EKRkIHYK_iBJTk1-ACV1MrzJBVBhO1NSGmwrqW9Dm6cH8fgVgHEQ
Message-ID: <CAERDJOGGF1gT7V=80kHF7HCTQ4e-uX2TMw_+461T4SsqUiC_hA@mail.gmail.com>
Subject: Re: [devuan-dev] bug#881: invoke-rc.d: Policy layer may override
runlevel constraint
To: Lorenzo <plorenzo@disroot.org>
Cc: 881@bugs.devuan.org, Mark Hindley <mark@hindley.org.uk>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
On Wed, Apr 2, 2025 at 2:33=E2=80=AFPM Lorenzo <plorenzo@disroot.org> wrote=
:
> I'm not sure what you want to do is supported by the
> policy-rc.d-declarative, but maybe you can do that with the old
> interface.
It would work perfectly for me if invoke-rc.d respected K links even
when policy layer allows an action.
I could modify invoke-rc.d just like that but I felt I should let you
know to make sure I'm not missing anything.
Regards,
Opty
Opty <opty77@gmail.com>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at 881) by bugs.devuan.org; 2 Apr 2025 12:34:39 +0000 Return-Path: <plorenzo@disroot.org> Delivered-To: bugs@devuan.org Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 12:34:39 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id 8MicCbQu7WeQGQAAmSBk0A (envelope-from <plorenzo@disroot.org>) for <bugs@devuan.org>; Wed, 02 Apr 2025 12:33:56 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 0F8054A8; Wed, 2 Apr 2025 12:33:55 +0000 (UTC) Authentication-Results: email.devuan.org; dkim=pass (2048-bit key; secure) header.d=disroot.org header.i=@disroot.org header.a=rsa-sha256 header.s=mail header.b=SfcsRpT7; dkim-atps=neutral X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=178.21.23.139; helo=layka.disroot.org; envelope-from=plorenzo@disroot.org; receiver=<UNKNOWN> Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) by email.devuan.org (Postfix) with ESMTPS id 78ACC173 for <881@bugs.devuan.org>; Wed, 2 Apr 2025 12:33:53 +0000 (UTC) Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id A8E202599D; Wed, 2 Apr 2025 14:33:52 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id qwiOWORH8-Cd; Wed, 2 Apr 2025 14:33:48 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1743597228; bh=quPSlgX1D4BEy0ND+PiuhKgMtaCzgOdLjnk1/uvHGs4=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=SfcsRpT7wMhJIQQbuSZq5VWyFfTlFHmEdkgbKjHxbFyulgNp+cvry0xCBrFgyjnN3 fkjALHRVdCLD7iRfWIdII79eQK2KDybi3Disd5zIIEaAzvOi5V8CjBkpr5s3qeTGJh MgnPQ8GQKrFgzqi70kGk+hSDzj8+WflCrYPuMHOsl36/xNzuRq+H2xuxhhkDZJFjQZ vFiK9AyoOneL6jRDZro9zwNWJoJ7QdFBOhcbVfCi4DQT1WwhfLFwYplG/ByVRvPXtW TLU+r7mIjn/0Dl6fNK6CUtJD8a3q8t+jiuTPGeZffc5+g2/V9MyvqxSMT0tBMBvYGp GnEDvvICZf7VQ== Date: Wed, 2 Apr 2025 14:33:40 +0200 From: Lorenzo <plorenzo@disroot.org> To: Opty <opty77@gmail.com> Cc: 881@bugs.devuan.org, devuan developers internal list <devuan-dev@lists.dyne.org>, Mark Hindley <mark@hindley.org.uk> Subject: Re: [devuan-dev] bug#881: invoke-rc.d: Policy layer may override runlevel constraint Message-ID: <20250402143026.50db21f7@lorenz.fritz.box> In-Reply-To: <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <Z-wTFqfiCrvD9Exb@hindley.org.uk> <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello Opty, On Wed, 2 Apr 2025 13:54:05 +0200 Opty <opty77@gmail.com> wrote: > On Tue, Apr 1, 2025 at 6:23=E2=80=AFPM Mark Hindley <mark@hindley.org.uk> > wrote: > > Thanks for this. However, I find your report a bit terse. > > > > Do you have policy-rcd-declarative installed? If so what is usage > > for it? How do you have a permissive policy defined? >=20 > Hopefully the whole story so far: >=20 > I wanted to disable services auto(re)start on package install/upgrade > so indeed I installed policy-rcd-declarative and > policy-rcd-declarative-deny-all which worked well for subsequent > vnstat install but then log rotation stopped working due to > invoke-rc.d so I modified 'deny' in /etc/service-policy.d/99-deny.pol > to 'allow' (*) but then K-link-disabled rsyslogd unexpectedly started > after an upgrade (**) so I had to surrender for now and 'chmod -x > /usr/sbin/policy-rc.d-declarative'. I'm not sure what you want to do is supported by the policy-rc.d-declarative, but maybe you can do that with the old interface. The policy-rc.d thing is meant to prevent signal (start stop restart) to services in chroots where it does not make sense to have a service running; for example, is used by the installer (but also by sbuild and there are other use cases); it could be also used by the local admin but the typical use is decide to completely block the entire package machinery on a service. I'm not sure how the declarative interface works, but the service name and the action (start/restart/stop/reload/whatever) are passed as argument to the old policy-rc.d script, so maybe with some scripting you can block start/restart actions but allow reload (or whatever is used by logrotate) ? I suggest you try to play with it, an example (it won't stop anything, just to understand how it works) # cat /usr/sbin/policy-rc.d=20 #!/bin/sh echo "first param is $1" >> /run/policytest.txt echo "second param is $2" >> /run/policytest.txt # 0 or 104 =3D run # 101 =3D do not run (denied by policy) exit 0 then call invoke-rc.d servicename restart and inspect /run/policytest.txt Hope it helps, Lorenzo >=20 > (*) Yes, I should have installed policy-rcd-declarative-allow-all > instead but what if I needed to go back again so for now I chose this > maybe a bit confusing solution. >=20 > (**) I use own sysklogd package without dependencies so I can keep > rsyslog along and experiment. >=20 > > It is worth reading https://bugs.debian.org/911290 which gives some > > useful background as to why this area is a pretty unfrequented > > backwater. >=20 > I went through 911290 a week ago when I was doing my research. >=20 > Regards, > Opty > _______________________________________________ > devuan-dev internal mailing list > devuan-dev@lists.dyne.org > Manage your subscription: > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/devuan-dev > Archive: https://lists.dyne.org/lurker/list/devuan-dev.en.html
Lorenzo <plorenzo@disroot.org>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at 881) by bugs.devuan.org; 2 Apr 2025 11:55:42 +0000
Return-Path: <opty77@gmail.com>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Wed, 02 Apr 2025 11:55:42 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id CJ5TEW8l7WfJFwAAmSBk0A
(envelope-from <opty77@gmail.com>)
for <bugs@devuan.org>; Wed, 02 Apr 2025 11:54:23 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id 1569F395; Wed, 2 Apr 2025 11:54:22 +0000 (UTC)
Authentication-Results: email.devuan.org;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=S4VEtq54;
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::22c; helo=mail-oi1-x22c.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN>
Received: from mail-oi1-x22c.google.com (mail-oi1-x22c.google.com [IPv6:2607:f8b0:4864:20::22c])
by email.devuan.org (Postfix) with ESMTPS id A300381
for <881@bugs.devuan.org>; Wed, 2 Apr 2025 11:54:19 +0000 (UTC)
Received: by mail-oi1-x22c.google.com with SMTP id 5614622812f47-3feb1c2ef15so210129b6e.0
for <881@bugs.devuan.org>; Wed, 02 Apr 2025 04:54:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743594857; x=1744199657; darn=bugs.devuan.org;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:from:to:cc:subject:date
:message-id:reply-to;
bh=KqVS8/Afc8RNJZ2UtU4M7zrmK7F/zxmOJBcQQaLlgos=;
b=S4VEtq54ZMY7Wd84Bjpj2JTzriEsn4AESFFGl3ovO8HR7ZY3MbA4upyxeSzTeQ2CEZ
Doi6dRFkhmxfEnDqDGcsVgKfHBg9GPan9PyddVRP4+IXWFFKA8Q5VvLXWEtlCZGFvUdZ
YNKrLUEGfzRhc6YDaL63fbCQr1e3LzNB7tWtTA2IxwjBrig03xMCYHBQ5t4/GEroOi1j
DgDLU22RvAhDSPoE21U3iNBEmzl5akMcNUKguV8QlulqfulmBX1Cdpm/hJq1OYSZLKGz
qFxJGr7wUZ5xx3w8W1y0ZZ9bA+HnmUIgQ6LUA74HcXM1HhoRZSHRJO7q0jVfSonTCKgP
UqZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743594857; x=1744199657;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=KqVS8/Afc8RNJZ2UtU4M7zrmK7F/zxmOJBcQQaLlgos=;
b=n9sRRhATnhYjM9lnL+ukNBtCeIRVYs5PhbFywKmWQ67NmI5npw4DRtyOR7m5b29jTI
LsXv+s5xak+NkNrWuaQKzxZj5tVMtZrgZxE4CJxqFqEmFNAWjYEMfgyAdgyYhpSWLVZ6
Mze15uHgtE/dT6wzZao2+qRMB3Unx+PYL2NQUwUXxk3leYeJr4HR8bmAuKCb7WRhBlTB
cP59bYvrCtoo6gIQ6wsyCV9bT4jLyFqs3itsPs7vNv0vYd/2QE4TOtcms36o+VzrJVyR
wAJU80uO8bHttmAERM9ZFCxvFQNzNhG+bQ9UYCzOJxbCCELBmYyNdbuDb+Jtde8gzJMi
zOiQ==
X-Gm-Message-State: AOJu0Yxp8ibBu9BSX+CADLDGnAC9ngrEjGCYSujf45dnHMXnYDQc+H5a
1i3b5F+cUJuEJE3MbVwwevKeVl9HtQ9BfEA8ut91NvoJAeLbBQ67YSCyZVlZwqAuCrN2Kn0sElW
MfIurB8QW5GZQScu9YvTFqmQ7Zfw=
X-Gm-Gg: ASbGnct8vKMWq7c01n2c+Ij9NDS/+7SWN+amoici1ROV8hTfoAsnCYOz7q0fjhp/B2W
ajwfSc8DU9DMYvt5ZxfRP8tmJzOOKKeN6VBIfQ7wPQ0YsyqVqY4STf1ZTk4fI5RqzV+ELTIfzMS
dFy2bgBW7zyb/aALYE1euwHNztBLBDtSOXWQ==
X-Google-Smtp-Source: AGHT+IH3FkJAC/RAzpazpOTKAvNdtBsi8ea0odC9EoasrDB8OGJplcimVPD3+49F99vv3IY9jM3nuoFx2XkKwpNSZAM=
X-Received: by 2002:a05:6808:2388:b0:3f6:6dea:55ac with SMTP id
5614622812f47-3ff0f601f1fmr3200589b6e.9.1743594857324; Wed, 02 Apr 2025
04:54:17 -0700 (PDT)
MIME-Version: 1.0
References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
<Z-wTFqfiCrvD9Exb@hindley.org.uk>
In-Reply-To: <Z-wTFqfiCrvD9Exb@hindley.org.uk>
From: Opty <opty77@gmail.com>
Date: Wed, 2 Apr 2025 13:54:05 +0200
X-Gm-Features: AQ5f1Jok6XOGHfZgRvCg7KwMtl6z7Wu_0CVsANmJ4lFC6yKKiI0-BT1Afnq0YqQ
Message-ID: <CAERDJOG_4mnRRA7oFvcbMFoiZitExizd=jR=HqyL9dT15ORFyQ@mail.gmail.com>
Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint
To: Mark Hindley <mark@hindley.org.uk>
Cc: 881@bugs.devuan.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
On Tue, Apr 1, 2025 at 6:23=E2=80=AFPM Mark Hindley <mark@hindley.org.uk> w=
rote:
> Thanks for this. However, I find your report a bit terse.
>
> Do you have policy-rcd-declarative installed? If so what is usage for it?=
How do
> you have a permissive policy defined?
Hopefully the whole story so far:
I wanted to disable services auto(re)start on package install/upgrade
so indeed I installed policy-rcd-declarative and
policy-rcd-declarative-deny-all which worked well for subsequent
vnstat install but then log rotation stopped working due to
invoke-rc.d so I modified 'deny' in /etc/service-policy.d/99-deny.pol
to 'allow' (*) but then K-link-disabled rsyslogd unexpectedly started
after an upgrade (**) so I had to surrender for now and 'chmod -x
/usr/sbin/policy-rc.d-declarative'.
(*) Yes, I should have installed policy-rcd-declarative-allow-all
instead but what if I needed to go back again so for now I chose this
maybe a bit confusing solution.
(**) I use own sysklogd package without dependencies so I can keep
rsyslog along and experiment.
> It is worth reading https://bugs.debian.org/911290 which gives some usefu=
l
> background as to why this area is a pretty unfrequented backwater.
I went through 911290 a week ago when I was doing my research.
Regards,
Opty
Opty <opty77@gmail.com>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Mark Hindley <mark@hindley.org.uk>
to 881-submit@bugs.devuan.org.
Full text available.Received: (at 881) by bugs.devuan.org; 1 Apr 2025 16:24:06 +0000 Return-Path: <mark@hindley.org.uk> Delivered-To: bugs@devuan.org Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Tue, 01 Apr 2025 16:24:06 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id 6DwVLxkT7GftRAAAmSBk0A (envelope-from <mark@hindley.org.uk>) for <bugs@devuan.org>; Tue, 01 Apr 2025 16:23:53 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 7B3845A0; Tue, 1 Apr 2025 16:23:53 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id BBA123AD for <881@bugs.devuan.org>; Tue, 1 Apr 2025 16:23:52 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 6E1FF130; Tue, 1 Apr 2025 17:23:51 +0100 (BST) Received: (nullmailer pid 8409 invoked by uid 1000); Tue, 01 Apr 2025 16:23:50 -0000 Date: Tue, 1 Apr 2025 17:23:50 +0100 From: Mark Hindley <mark@hindley.org.uk> To: Opty <opty77@gmail.com>, 881@bugs.devuan.org Subject: Re: bug#881: invoke-rc.d: Policy layer may override runlevel constraint Message-ID: <Z-wTFqfiCrvD9Exb@hindley.org.uk> References: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com> X-Debbugs-No-Ack: No Thanks Control: tags -1 moreinfo Opty, Thanks for this. However, I find your report a bit terse. Do you have policy-rcd-declarative installed? If so what is usage for it? How do you have a permissive policy defined? It is worth reading https://bugs.debian.org/911290 which gives some useful background as to why this area is a pretty unfrequented backwater. Mark
devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Received: (at submit) by bugs.devuan.org; 1 Apr 2025 12:15:04 +0000
Return-Path: <opty77@gmail.com>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Tue, 01 Apr 2025 12:15:04 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id w3AGO4bY62exIQAAmSBk0A
(envelope-from <opty77@gmail.com>)
for <bugs@devuan.org>; Tue, 01 Apr 2025 12:13:58 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id D6FA85A0; Tue, 1 Apr 2025 12:13:58 +0000 (UTC)
Authentication-Results: email.devuan.org;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=ea+5sft3;
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2607:f8b0:4864:20::c29; helo=mail-oo1-xc29.google.com; envelope-from=opty77@gmail.com; receiver=<UNKNOWN>
Received: from mail-oo1-xc29.google.com (mail-oo1-xc29.google.com [IPv6:2607:f8b0:4864:20::c29])
by email.devuan.org (Postfix) with ESMTPS id 3920B3AD
for <submit@bugs.devuan.org>; Tue, 1 Apr 2025 12:13:58 +0000 (UTC)
Received: by mail-oo1-xc29.google.com with SMTP id 006d021491bc7-601c848abfbso723322eaf.1
for <submit@bugs.devuan.org>; Tue, 01 Apr 2025 05:13:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743509636; x=1744114436; darn=bugs.devuan.org;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=mmSpkT6dK+uMVPFuODN539hg33tskUOlpy3RMzpmQ2o=;
b=ea+5sft35YFaSJy9/OyGNf1GYd0AcwrhRrwXPiAv5EDuXEieRSQiArygC9y2BUQera
aKIC7Sg1FbfSuqWoWmn/897TPb8ytvLcSlYILKcMjWAHj7RGWVwO4LXDJ3cx8SonfdH/
q1hs+KrUhKTCrqWe3BYPjEvGTYW1xLE1UBzcfLWJw34a0FzF1eSIjSBy6zfSxzU4kdaO
xDJ6Hn5xP5REnSgP0D/aLKxSwVjGGwB9bYWkHfJ0K15g+qUvkoha0eiXAqDSLcxp1NwX
ZF2nvpBAg5IZxcl+nk0xguBBRB8aekGQl1KcDzDi37uXxIvP00woLEawTAySaIuIjETu
i2oA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743509636; x=1744114436;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=mmSpkT6dK+uMVPFuODN539hg33tskUOlpy3RMzpmQ2o=;
b=ktdTielGluhqiW0Rk8OwamwPjnGlmQ2M0STrtNhiXGujR2uGn8mWd7kgp78iYiwK1l
z5igw6L2PyqAOs4DY3qWn9bt7brTX5mOVk+2zWaCk6SIegk7fr4ftM4JMSW3nn12nwOZ
1ko4JM2e162zrKsDJtykXfrxMdLrNrO6AyI57GS4s0oLgjXq5yJ9rphSGU+c5l3Bz/Rx
E0Ie+UtOv9Zms9CnC5+3i4DAJMD2VSbC+JpuSRgYhKp/t3S4We33f776X5Z2y/sKZpGW
Wf2WKqn4A2UpVd/yZHDJ1FzQ478Rh/fi7ywYoaSkHSvPUeDbJD19oxCBo6TErqBxT7+m
W5fw==
X-Gm-Message-State: AOJu0YzbdGjlBbBQWQC/yvHg+Y/03rDkH5VgwWUC/w71rCpA+CmByK7C
wKnM+oC0+Lr8QrwlUkJuq8BAPDgc1hYgob9tdW3T+pfIgezlqnsZ/AI7vLVaGrobC0Sk4VSuNvA
67KsCFcvSMDWDeGps2KG6gVqlvWu3mQf2
X-Gm-Gg: ASbGnctlHL2Y3MxARcnMGsTH9uDaHI4jtQ0j9+tnuLbGK8MwE6zIuF/r80PmkT8W+Of
9mOK88Rpmw36bKNU3hOGkY7flYRiOn/WGsswWNNW6dD82tyyV9JmTrgu2v7sMhStfHPSTu6d/Lt
1bp3S6Inla14bl0I9QwxH4DqhH0FN28oL/UA==
X-Google-Smtp-Source: AGHT+IGN5QSXR5Gg3liDxX5/iJqNzgMs2SkCG+9Xs+SH8s3LEhoRav2PK/Ab7iZMaIkLWRYcK6ZKwiDm8+DICegsVhM=
X-Received: by 2002:a05:6808:1484:b0:3f6:701e:dc8b with SMTP id
5614622812f47-3ff0f5b7017mr2402291b6e.4.1743509635441; Tue, 01 Apr 2025
05:13:55 -0700 (PDT)
MIME-Version: 1.0
From: Opty <opty77@gmail.com>
Date: Tue, 1 Apr 2025 14:13:44 +0200
X-Gm-Features: AQ5f1JqyYl3J7fX6sHcTYobAQy8cZOZlsZScJd0d4GYIK7UuO_IctnK1YcnyJYs
Message-ID: <CAERDJOGBvwgsTJ7rL-MaUqLmBk7kBd12rtuAj1hDQt0-U9Ktug@mail.gmail.com>
Subject: invoke-rc.d: Policy layer may override runlevel constraint
To: submit@bugs.devuan.org
Content-Type: text/plain; charset="UTF-8"
Package: init-system-helpers
Version: 1.65.2devuan1
querypolicy call in invoke-rc.d may override previous result of K link
test. When using permissive default policy this leads to e.g. unwanted
start of a disabled service after package upgrade.
Regards,
Opty
Opty <opty77@gmail.com>:Devuan Dev Team <devuan-dev@lists.dyne.org>.
Full text available.devuan-bugs@lists.dyne.org, Devuan Dev Team <devuan-dev@lists.dyne.org>:bug#881; Package init-system-helpers.
Full text available.Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.
Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified:
Wed, 9 Apr 2025 18:39:01 UTC