Package: portmap
Version: 6.0-6
Severity: important

The portmap init script still uses `pidof portmap' when deciding whether
to start portmap instead of creating a pidfile under /var/run.  This
means that

- the potential DoS in #448470 still exists

- on system shutdown portmap will be killed by sendsigs, causing trouble.
  
The latter problem was triggered on my system when I switched to a
dependency based boot system with the insserv package.  It moved
nfs-common after sendsigs and the rpc.{stat,idmap}.d processes had to be
SIGKILLed, causing a 5-6 seconds delay in the shutdown process.  See the
thread starting at
http://lists.alioth.debian.org/pipermail/initscripts-ng-devel/2008-July/000548.html.


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.25.11
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages portmap depends on:
ii  debconf [debconf-2.0]         1.5.22     Debian configuration management sy
ii  libc6                         2.7-12     GNU C Library: Shared libraries
ii  libwrap0                      7.6.q-15   Wietse Venema's TCP wrappers libra
ii  lsb-base                      3.2-13     Linux Standard Base 3.2 init scrip

portmap recommends no packages.

-- debconf information:
* portmap/loopback: false



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to