Package: drbd8-utils
Version: 2:8.0.14-2
Severity: normal

When using drbdadm using the HA sample config given in /etc/drbd.conf,
the following warning is issued:

"
  You are using the 'drbd-peer-outdater' as outdate-peer program.
  If you use that mechanism the dopd heartbeat plugin program needs
  to be able to call drbdsetup and drbdmeta with root privileges.

  You need to fix this with these commands:
  chgrp haclient /sbin/drbdsetup
  chmod o-x /sbin/drbdsetup
  chmod u+s /sbin/drbdsetup

  chgrp haclient /sbin/drbdmeta
  chmod o-x /sbin/drbdmeta
  chmod u+s /sbin/drbdmeta
"


...but an upgrade or reinstall of the package will discard these
modified permissions, and things will break (probably in a nasty way, at
some time later during an HA failover).

It should ask you to do this instead:

dpkg-statoverride --add --update root haclient 4750 /sbin/drbdsetup
dpkg-statoverride --add --update root haclient 4750 /sbin/drbdmeta

and maybe some arrangment should be made to check whether these changes
are needed (because they have been undone) at package upgrade time?

Cheers,

Tim.

-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to