Your message dated Tue, 22 May 2007 02:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#425431: fixed in rssh 2.3.2-5
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: rssh
Version: 2.3.2-4
Severity: grave
Justification: renders package unusable
I wondered why my rssh chroot setup doesn't work anymore and found out
that /usr/lib/rssh/rssh_chroot_helper doesn't get the +s bit set.
The code in your postinst script doesn't look correct:
#! /bin/sh -e
# postinst script for rssh
if [ "$1" = "configure" ] || [ "$1" = "reconfigure" ] ; then
. /usr/share/debconf/confmodule
db_get rssh/chroot_helper_setuid
setuid="$RET"
db_stop
if [ ! -x /usr/sbin/dpkg-statoverride ] ; then
#^ removing the NOT helps and gets me any further
dpkg-statoverride --list /usr/lib/rssh/rssh_chroot_helper > /dev/null
# but here it stops because you the call above returns a $? != 0 and you
# have set -e (exit if any command returns an exitvalue != 0)
status=$?
if [ "$status" != 0 ] ; then
if [ "$setuid" = "true" ] ; then
chmod 4755 /usr/lib/rssh/rssh_chroot_helper
else
chmod 0755 /usr/lib/rssh/rssh_chroot_helper
fi
fi
fi
if [ -x /usr/sbin/add-shell ]; then
/usr/sbin/add-shell /usr/bin/rssh
fi
fi
exit 0
#----------------------------------------------
Changing it to this fixes the problem for me
#! /bin/sh
# postinst script for rssh
if [ "$1" = "configure" ] || [ "$1" = "reconfigure" ] ; then
. /usr/share/debconf/confmodule
db_get rssh/chroot_helper_setuid
setuid="$RET"
db_stop
if [ -x /usr/sbin/dpkg-statoverride ] ; then
dpkg-statoverride --list /usr/lib/rssh/rssh_chroot_helper > /dev/null
status=$?
if [ "$status" != 0 ] ; then
if [ "$setuid" = "true" ] ; then
chmod 4755 /usr/lib/rssh/rssh_chroot_helper
else
chmod 0755 /usr/lib/rssh/rssh_chroot_helper
fi
fi
fi
if [ -x /usr/sbin/add-shell ]; then
/usr/sbin/add-shell /usr/bin/rssh
fi
fi
exit 0
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.20-1-k7 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages rssh depends on:
ii debconf [debconf-2.0] 1.5.13 Debian configuration management sy
ii libc6 2.5-7 GNU C Library: Shared libraries
ii openssh-server 1:4.3p2-10 Secure shell server, an rshd repla
rssh recommends no packages.
-- debconf information:
* rssh/chroot_helper_setuid: true
--- End Message ---
--- Begin Message ---
Source: rssh
Source-Version: 2.3.2-5
We believe that the bug you reported is fixed in the latest version of
rssh, which is due to be installed in the Debian FTP archive:
rssh_2.3.2-5.diff.gz
to pool/main/r/rssh/rssh_2.3.2-5.diff.gz
rssh_2.3.2-5.dsc
to pool/main/r/rssh/rssh_2.3.2-5.dsc
rssh_2.3.2-5_i386.deb
to pool/main/r/rssh/rssh_2.3.2-5_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Russ Allbery <[EMAIL PROTECTED]> (supplier of updated rssh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 21 May 2007 19:10:54 -0700
Source: rssh
Binary: rssh
Architecture: source i386
Version: 2.3.2-5
Distribution: unstable
Urgency: low
Maintainer: Jesus Climent <[EMAIL PROTECTED]>
Changed-By: Russ Allbery <[EMAIL PROTECTED]>
Description:
rssh - Restricted shell allowing only scp, sftp, cvs, rsync and/or rdist
Closes: 424672 425431
Changes:
rssh (2.3.2-5) unstable; urgency=low
.
* Fix the logic for checking whether the setuid status of
rssh_chroot_helper was overridden by the sysadmin. The previous logic
would only make it setuid if dpkg-statoverride couldn't be found.
Thanks, Peter Baumann. (Closes: #425431)
* Don't add rssh to /etc/shells; restricted shells should not be listed
there. Remove it from /etc/shells if upgrading from an older version.
Also, we don't need to conditionalize running add-shell and
remove-shell, since debianutils is essential and has had add-shell and
remove-shell since etch. (Closes: #424672)
* Remove the obsolete security note from the config script.
* Fix the build system to not run configure twice.
* Add XS-Vcs-Svn and XS-Vcs-Browser control fields.
Files:
17e7773bd4cf47c6f86453505527f216 766 net optional rssh_2.3.2-5.dsc
6ff680cd1a7aba43beb7d90d97ec2223 13798 net optional rssh_2.3.2-5.diff.gz
c4a294cadd6afde9da18366f3c4cae3a 46674 net optional rssh_2.3.2-5_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGUlJa+YXjQAr8dHYRAqxdAJ9E2Oai67dRGL+3jKdfUyyWT9bQ6gCeLrVT
OlCX9eVcAQOvnRMxJI+8OoQ=
=jI+i
-----END PGP SIGNATURE-----
--- End Message ---