Your message dated Tue, 22 May 2007 02:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#425431: fixed in rssh 2.3.2-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: rssh
Version: 2.3.2-4
Severity: grave
Justification: renders package unusable

I wondered why my rssh chroot setup doesn't work anymore and found out
that /usr/lib/rssh/rssh_chroot_helper doesn't get the +s bit set.

The code in your postinst script doesn't look correct:

#! /bin/sh -e
# postinst script for rssh

if [ "$1" = "configure" ] || [ "$1" = "reconfigure" ] ; then
    . /usr/share/debconf/confmodule
    db_get rssh/chroot_helper_setuid
    setuid="$RET"
    db_stop

    if [ ! -x /usr/sbin/dpkg-statoverride ] ; then
        #^ removing the NOT helps and gets me any further
        dpkg-statoverride --list /usr/lib/rssh/rssh_chroot_helper > /dev/null
        # but here it stops because you the call above returns a $? != 0 and you
        # have set -e (exit if any command returns an exitvalue != 0)
        status=$?
        if [ "$status" != 0 ] ; then
            if [ "$setuid" = "true" ] ; then
                chmod 4755 /usr/lib/rssh/rssh_chroot_helper
            else
                chmod 0755 /usr/lib/rssh/rssh_chroot_helper
            fi
        fi
    fi

    if [ -x /usr/sbin/add-shell ]; then
        /usr/sbin/add-shell /usr/bin/rssh
    fi
fi

exit 0

#----------------------------------------------
Changing it to this fixes the problem for me

#! /bin/sh
# postinst script for rssh

if [ "$1" = "configure" ] || [ "$1" = "reconfigure" ] ; then
    . /usr/share/debconf/confmodule
    db_get rssh/chroot_helper_setuid
    setuid="$RET"
    db_stop

    if [ -x /usr/sbin/dpkg-statoverride ] ; then
        dpkg-statoverride --list /usr/lib/rssh/rssh_chroot_helper > /dev/null
        status=$?
        if [ "$status" != 0 ] ; then
            if [ "$setuid" = "true" ] ; then
                chmod 4755 /usr/lib/rssh/rssh_chroot_helper
            else
                chmod 0755 /usr/lib/rssh/rssh_chroot_helper
            fi
        fi
    fi

    if [ -x /usr/sbin/add-shell ]; then
        /usr/sbin/add-shell /usr/bin/rssh
    fi
fi

exit 0


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.20-1-k7 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages rssh depends on:
ii  debconf [debconf-2.0]         1.5.13     Debian configuration management sy
ii  libc6                         2.5-7      GNU C Library: Shared libraries
ii  openssh-server                1:4.3p2-10 Secure shell server, an rshd repla

rssh recommends no packages.

-- debconf information:
* rssh/chroot_helper_setuid: true


--- End Message ---
--- Begin Message ---
Source: rssh
Source-Version: 2.3.2-5

We believe that the bug you reported is fixed in the latest version of
rssh, which is due to be installed in the Debian FTP archive:

rssh_2.3.2-5.diff.gz
  to pool/main/r/rssh/rssh_2.3.2-5.diff.gz
rssh_2.3.2-5.dsc
  to pool/main/r/rssh/rssh_2.3.2-5.dsc
rssh_2.3.2-5_i386.deb
  to pool/main/r/rssh/rssh_2.3.2-5_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Russ Allbery <[EMAIL PROTECTED]> (supplier of updated rssh package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 21 May 2007 19:10:54 -0700
Source: rssh
Binary: rssh
Architecture: source i386
Version: 2.3.2-5
Distribution: unstable
Urgency: low
Maintainer: Jesus Climent <[EMAIL PROTECTED]>
Changed-By: Russ Allbery <[EMAIL PROTECTED]>
Description: 
 rssh       - Restricted shell allowing only scp, sftp, cvs, rsync and/or rdist
Closes: 424672 425431
Changes: 
 rssh (2.3.2-5) unstable; urgency=low
 .
   * Fix the logic for checking whether the setuid status of
     rssh_chroot_helper was overridden by the sysadmin.  The previous logic
     would only make it setuid if dpkg-statoverride couldn't be found.
     Thanks, Peter Baumann.  (Closes: #425431)
   * Don't add rssh to /etc/shells; restricted shells should not be listed
     there.  Remove it from /etc/shells if upgrading from an older version.
     Also, we don't need to conditionalize running add-shell and
     remove-shell, since debianutils is essential and has had add-shell and
     remove-shell since etch.  (Closes: #424672)
   * Remove the obsolete security note from the config script.
   * Fix the build system to not run configure twice.
   * Add XS-Vcs-Svn and XS-Vcs-Browser control fields.
Files: 
 17e7773bd4cf47c6f86453505527f216 766 net optional rssh_2.3.2-5.dsc
 6ff680cd1a7aba43beb7d90d97ec2223 13798 net optional rssh_2.3.2-5.diff.gz
 c4a294cadd6afde9da18366f3c4cae3a 46674 net optional rssh_2.3.2-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGUlJa+YXjQAr8dHYRAqxdAJ9E2Oai67dRGL+3jKdfUyyWT9bQ6gCeLrVT
OlCX9eVcAQOvnRMxJI+8OoQ=
=jI+i
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to